CVE-2015-1317

High

Published: 08/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.

Risk Assessment

Organizations may be exposed to attacks that lead to system crashes or unauthorized code execution, potentially resulting in data loss or security breaches.

Recommendation

It is recommended to update to the latest version of Oxide to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in Oxide

CVE-2016-1578Critical
Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests.

Original NVD description (English source)

Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.