CVE-2015-1230 in Chrome

Riassunto

di MITRE

The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 21/01/2015
• Divulgazione: 08/03/2015
• Moderazione: accettato
• Voce: VDB-73918
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.02121
• KEV: no
• Attività: molto basso
• Settore: Industry, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-1230
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-1230
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-1230/