CVE-2015-1216
HighSummary
A use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in V8 bindings in Blink, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.
Risk Assessment
An attacker could exploit this vulnerability to disrupt the browser's operation, potentially leading to service unavailability for users.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Google Chrome (przed wersją 41.0.2272.76)
See all- CVE-2015-1230High
The getHiddenProperty function in Blink, used in Google Chrome before version 41.0.2272.76, has a name conflict with the AudioContext class. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers 'type confusion.'
- CVE-2015-1215High
The filters implementation in Skia, as used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Original NVD description (English source)
Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.