CVE-2015-1223Use After Free in Google Chrome

CWE-416Use After Free10 documents8 sources
Severity
7.5HIGHNVD
EPSS
1.2%
top 20.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 9
Latest updateMay 17

Description

Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

NVDgoogle/chrome40.0.2214.115

🔴Vulnerability Details

3
GHSA
GHSA-q9j9-xccf-c88q: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement2022-05-17
OSV
oxide-qt vulnerabilities2015-03-10
OSV
CVE-2015-1223: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement2015-03-08

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities2015-03-10
Red Hat
chromium-browser: Use-after-free in dom2015-03-03

🕵️Threat Intelligence

2
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities2015-03-17
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities2015-03-17

💬Community

1
Bugzilla
CVE-2015-1223 chromium-browser: Use-after-free in dom2015-03-04