CVE-2015-1230
HighSummary
The getHiddenProperty function in Blink, used in Google Chrome before version 41.0.2272.76, has a name conflict with the AudioContext class. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers 'type confusion.'
Risk Assessment
This vulnerability may lead to denial of service, affecting the availability of web applications. There is also a risk of unspecified impacts that could affect system security.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability. Additionally, monitor web applications for suspicious activities related to AudioContext.
Other vulnerabilities in Google Chrome (przed wersją 41.0.2272.76)
See all- CVE-2015-1216High
A use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in V8 bindings in Blink, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.
- CVE-2015-1215High
The filters implementation in Skia, as used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Original NVD description (English source)
The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."