CVE-2015-1215
HighSummary
The filters implementation in Skia, as used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Risk Assessment
Attackers may exploit this vulnerability to disrupt the browser's functionality, potentially leading to service unavailability for users.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Google Chrome (przed wersją 41.0.2272.76)
See all- CVE-2015-1230High
The getHiddenProperty function in Blink, used in Google Chrome before version 41.0.2272.76, has a name conflict with the AudioContext class. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers 'type confusion.'
- CVE-2015-1216High
A use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in V8 bindings in Blink, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.
Original NVD description (English source)
The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.