Lucene search

K
ubuntuUbuntuUSN-2895-1
HistoryFeb 18, 2016 - 12:00 a.m.

Oxide vulnerabilities

2016-02-1800:00:00
ubuntu.com
32

7.2 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.6%

Releases

  • Ubuntu 15.10
  • Ubuntu 14.04 ESM

Packages

  • oxide-qt - Web browser engine library for Qt (QML plugin)

Details

The DOM implementation in Chromium did not properly restrict frame-attach
operations from occurring during or after frame-detach operations. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to bypass same-origin restrictions.
(CVE-2016-1623)

An integer underflow was discovered in Brotli. If a user were tricked in
to opening a specially crafted website, an attacker could potentially
exploit this to cause a denial of service via application crash, or
execute arbitrary code with the privileges of the user invoking the
program. (CVE-2016-1624)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchliboxideqtcore0< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchliboxideqt-qmlplugin< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchliboxideqt-qmlplugin-dbgsym< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchliboxideqtcore0-dbgsym< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchliboxideqtquick0< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchliboxideqtquick0-dbgsym< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchoxideqt-chromedriver< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchoxideqt-codecs< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchoxideqt-codecs-dbg< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Ubuntu15.10noarchoxideqt-codecs-dbgsym< 1.12.6-0ubuntu0.15.10.1UNKNOWN
Rows per page:
1-10 of 301