CVE-2015-1221
published 2015-03-09CVE-2015-1221: Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have…
PriorityP433high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.56%
83.6th percentile
Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 40.0.2214.115 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Oxide vulnerabilities
vendor_ubuntu·2015-03-10·CVSS 7.5
CVE-2015-1213 [HIGH] Oxide vulnerabilities
Title: Oxide vulnerabilities
Summary: Several security issues were fixed in Oxide.
Several out-of-bounds write bugs were discovered in Skia. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service via application
crash or execute arbitrary code with the privileges of the user invoking
the program. (CVE-2015-1213, CVE-2015-1214, CVE-2015-1215)
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via renderer crash,
or execute arbitrary code with the privileges of the sandboxed render
process. (CVE-2015-1216)
Multiple type confusion bugs were discovered in the V8
Red Hat
chromium-browser: Use-after-free in web databases
vendor_redhat·2015-03-03·CVSS 7.5
CVE-2015-1221 [HIGH] CWE-416 chromium-browser: Use-after-free in web databases
chromium-browser: Use-after-free in web databases
Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
GHSA
GHSA-vm3f-p9xp-8hvv: Use-after-free vulnerability in Blink, as used in Google Chrome before 41
ghsa_unreviewed·2022-05-17
CVE-2015-1221 [HIGH] GHSA-vm3f-p9xp-8hvv: Use-after-free vulnerability in Blink, as used in Google Chrome before 41
Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
OSV
oxide-qt vulnerabilities
osv·2015-03-10·CVSS 7.5
CVE-2015-1213 [HIGH] oxide-qt vulnerabilities
oxide-qt vulnerabilities
Several out-of-bounds write bugs were discovered in Skia. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service via application
crash or execute arbitrary code with the privileges of the user invoking
the program. (CVE-2015-1213, CVE-2015-1214, CVE-2015-1215)
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via renderer crash,
or execute arbitrary code with the privileges of the sandboxed render
process. (CVE-2015-1216)
Multiple type confusion bugs were discovered in the V8 bindings in Blink.
If a user were tricked in to opening a
OSV
CVE-2015-1221: Use-after-free vulnerability in Blink, as used in Google Chrome before 41
osv·2015-03-08·CVSS 7.5
CVE-2015-1221 [HIGH] CVE-2015-1221: Use-after-free vulnerability in Blink, as used in Google Chrome before 41
Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
No detection rules found.
No public exploits indexed.
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities
blogs_talos·2015-03-17·CVSS 9.3
[CRITICAL] Research Spotlight: Exploiting Use-After-Free Vulnerabilities
This blog post was authored by Earl Carter & Yves Younan.
Talos is constantly researching the ways in which threat actors take advantage of security weaknesses to exploit systems. Yves Younan of Talos will be presenting at CanSecWest on Friday March 20th. The topic of his talk will be FreeSentry, a software-based mitigation technique developed by Talos to protect against exploitation of use-after-free vulnerabilities. Use-after-free vulnerabilities have become an important class of security problems due to the existence of mitigations that protect against other types of vulnerabilities, such as buffer overflows.
Just examining the CVE entries for 2015, you can already see over 20 use-after-free vulnerabilities that have already been identified, impacting various common software applicati
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities
blogs_talos·2015-03-17·CVSS 9.3
[CRITICAL] Research Spotlight: Exploiting Use-After-Free Vulnerabilities
## Research Spotlight: Exploiting Use-After-Free Vulnerabilities
This blog post was authored by Earl Carter & Yves Younan .
Talos is constantly researching the ways in which threat actors take advantage of security weaknesses to exploit systems. Yves Younan of Talos will be presenting at CanSecWest on Friday March 20th. The topic of his talk will be FreeSentry , a software-based mitigation technique developed by Talos to protect against exploitation of use-after-free vulnerabilities. Use-after-free vulnerabilities have become an important class of security problems due to the existence of mitigations that protect against other types of vulnerabilities, such as buffer overflows.
Just examining the CVE entries for 2015, you can already see over 20 use-after-free vulnerabilities that have
Bugzilla
CVE-2015-1221 chromium-browser: Use-after-free in web databases
bugzilla·2015-03-04·CVSS 7.5
CVE-2015-1221 [HIGH] CVE-2015-1221 chromium-browser: Use-after-free in web databases
CVE-2015-1221 chromium-browser: Use-after-free in web databases
An unspecified use-after-free flaw was found in the web databases component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0627 https://rhn.redhat.com/errata/RHSA-2015-0627.html
http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0627.htmlhttp://www.securityfocus.com/bid/72901http://www.ubuntu.com/usn/USN-2521-1https://code.google.com/p/chromium/issues/detail?id=455368https://security.gentoo.org/glsa/201503-12https://src.chromium.org/viewvc/blink?revision=190021&view=revisionhttps://src.chromium.org/viewvc/blink?revision=190035&view=revisionhttp://googlechromereleases.blogspot.com/2015/03/stable-channel-update.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0627.htmlhttp://www.securityfocus.com/bid/72901http://www.ubuntu.com/usn/USN-2521-1https://code.google.com/p/chromium/issues/detail?id=455368https://security.gentoo.org/glsa/201503-12https://src.chromium.org/viewvc/blink?revision=190021&view=revisionhttps://src.chromium.org/viewvc/blink?revision=190035&view=revision
2015-03-09
Published