CVE-2015-1222 — Use After Free in Google Chrome

CWE-416 — Use After Free10 documents8 sources
Severity
7.5HIGHNVD
EPSS
1.0%
top 23.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedMar 9
Latest updateMay 17

Description

Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome40.0.2214.115

🔴Vulnerability Details

3
GHSA
GHSA-cv94-9f85-545q: Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cach↗2022-05-17
▶
OSV
oxide-qt vulnerabilities↗2015-03-10
▶
OSV
CVE-2015-1222: Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cach↗2015-03-08
▶

💥Exploits & PoCs

1
Exploit-DB
Wireshark - file_read 'wtap_read_bytes_or_eof/mp2t_find_next_pcr' Stack Buffer Overflow↗2015-12-16
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2015-03-10
▶
Red Hat
chromium-browser: Use-after-free in service workers↗2015-03-03
▶

🕵️Threat Intelligence

2
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities↗2015-03-17
▶
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities↗2015-03-17
▶

💬Community

1
Bugzilla
CVE-2015-1222 chromium-browser: Use-after-free in service workers↗2015-03-04
▶