CVE-2015-1332 The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute ar...
HighCVSS 8.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| oxide project oxide | <= 1.9.0 | No fix listed |
References
- people.canonical.com third-party-advisory
- 76710 third-party-advisory vdb-entry
- USN-2735-1 vendor-advisory
- launchpad.net third-party-advisory