CVE-2015-1276 Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of...
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | <= 43.0.2357.134 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| redhat enterprise linux desktop supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary | = 6.0 | No fix listed |
| redhat enterprise linux server supplementary eus | = 6.7z | No fix listed |
| redhat enterprise linux workstation supplementary | = 6.0 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| opensuse | = 13.2 | No fix listed |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2015:1287 vendor-advisory
- RHSA-2015:1499 vendor-advisory
- DSA-3315 vendor-advisory
- 75973 vdb-entry
- 1033031 vdb-entry
- code.google.com
- codereview.chromium.org
- GLSA-201603-09 vendor-advisory