CVE-2015-1220 — Use After Free in Google Chrome

CWE-416 — Use After Free8 documents8 sources
Severity
6.8MEDIUMNVD
EPSS
3.1%
top 13.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Google ChromeCanonical Ubuntu LinuxRedhat Enterprise Linux Desktop Supplementary+3 more
Timeline
PublishedMar 9
Latest updateMay 17

Description

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶NVDgoogle/chrome40.0.2214.115

Also affects: Ubuntu Linux 14.04, 14.10, Enterprise Linux 6.0, 6.6.z

🔴Vulnerability Details

3
GHSA
GHSA-rcv7-5335-j8wp: Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader↗2022-05-17
▶
CVEList
CVE-2015-1220: Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader↗2015-03-09
▶
OSV
CVE-2015-1220: Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader↗2015-03-08
▶

💥Exploits & PoCs

1
Exploit-DB
Malwarebytes Anti-Exploit 1.03.1.1220/1.04.1.1012 - Out-of-Bounds Read Denial of Service↗2015-01-20
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2015-03-10
▶
Red Hat
chromium-browser: Use-after-free in gif decoder↗2015-03-03
▶

💬Community

1
Bugzilla
CVE-2015-1220 chromium-browser: Use-after-free in gif decoder↗2015-03-04
▶
CVE-2015-1220 — Use After Free in Google Chrome | cvebase