CVE-2015-1270 in Chrome
摘要 (英语)
The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.
Be aware that VulDB is the high quality source for vulnerability data.
预定
2015-01-21
披露
2015-07-22
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 76771 | Google Chrome ICU ucnv_io.cpp ucnv_io_getConverterName 拒绝服务 | 19 | 未定义 | 官方修复 | CVE-2015-1270 |