CVE-2015-1223
published 2015-03-09CVE-2015-1223: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76…
PriorityP432high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.85%
77.0th percentile
Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 40.0.2214.115 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Oxide vulnerabilities
vendor_ubuntu·2015-03-10·CVSS 7.5
CVE-2015-1213 [HIGH] Oxide vulnerabilities
Title: Oxide vulnerabilities
Summary: Several security issues were fixed in Oxide.
Several out-of-bounds write bugs were discovered in Skia. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service via application
crash or execute arbitrary code with the privileges of the user invoking
the program. (CVE-2015-1213, CVE-2015-1214, CVE-2015-1215)
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via renderer crash,
or execute arbitrary code with the privileges of the sandboxed render
process. (CVE-2015-1216)
Multiple type confusion bugs were discovered in the V8
Red Hat
chromium-browser: Use-after-free in dom
vendor_redhat·2015-03-03·CVSS 7.5
CVE-2015-1223 [HIGH] CWE-416 chromium-browser: Use-after-free in dom
chromium-browser: Use-after-free in dom
Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.
GHSA
GHSA-q9j9-xccf-c88q: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement
ghsa_unreviewed·2022-05-17
CVE-2015-1223 [HIGH] GHSA-q9j9-xccf-c88q: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement
Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.
OSV
oxide-qt vulnerabilities
osv·2015-03-10·CVSS 7.5
CVE-2015-1213 [HIGH] oxide-qt vulnerabilities
oxide-qt vulnerabilities
Several out-of-bounds write bugs were discovered in Skia. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service via application
crash or execute arbitrary code with the privileges of the user invoking
the program. (CVE-2015-1213, CVE-2015-1214, CVE-2015-1215)
A use-after-free was discovered in the V8 bindings in Blink. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit this to cause a denial of service via renderer crash,
or execute arbitrary code with the privileges of the sandboxed render
process. (CVE-2015-1216)
Multiple type confusion bugs were discovered in the V8 bindings in Blink.
If a user were tricked in to opening a
OSV
CVE-2015-1223: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement
osv·2015-03-08·CVSS 7.5
CVE-2015-1223 [HIGH] CVE-2015-1223: Multiple use-after-free vulnerabilities in core/html/HTMLInputElement
Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.
No detection rules found.
No public exploits indexed.
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities
blogs_talos·2015-03-17·CVSS 9.3
[CRITICAL] Research Spotlight: Exploiting Use-After-Free Vulnerabilities
This blog post was authored by Earl Carter & Yves Younan.
Talos is constantly researching the ways in which threat actors take advantage of security weaknesses to exploit systems. Yves Younan of Talos will be presenting at CanSecWest on Friday March 20th. The topic of his talk will be FreeSentry, a software-based mitigation technique developed by Talos to protect against exploitation of use-after-free vulnerabilities. Use-after-free vulnerabilities have become an important class of security problems due to the existence of mitigations that protect against other types of vulnerabilities, such as buffer overflows.
Just examining the CVE entries for 2015, you can already see over 20 use-after-free vulnerabilities that have already been identified, impacting various common software applicati
Talos
Research Spotlight: Exploiting Use-After-Free Vulnerabilities
blogs_talos·2015-03-17·CVSS 9.3
[CRITICAL] Research Spotlight: Exploiting Use-After-Free Vulnerabilities
## Research Spotlight: Exploiting Use-After-Free Vulnerabilities
This blog post was authored by Earl Carter & Yves Younan .
Talos is constantly researching the ways in which threat actors take advantage of security weaknesses to exploit systems. Yves Younan of Talos will be presenting at CanSecWest on Friday March 20th. The topic of his talk will be FreeSentry , a software-based mitigation technique developed by Talos to protect against exploitation of use-after-free vulnerabilities. Use-after-free vulnerabilities have become an important class of security problems due to the existence of mitigations that protect against other types of vulnerabilities, such as buffer overflows.
Just examining the CVE entries for 2015, you can already see over 20 use-after-free vulnerabilities that have
Bugzilla
CVE-2015-1223 chromium-browser: Use-after-free in dom
bugzilla·2015-03-04·CVSS 7.5
CVE-2015-1223 [HIGH] CVE-2015-1223 chromium-browser: Use-after-free in dom
CVE-2015-1223 chromium-browser: Use-after-free in dom
An unspecified use-after-free flaw was found in the dom component of the Chromium browser.
External References:
http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:0627 https://rhn.redhat.com/errata/RHSA-2015-0627.html
http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0627.htmlhttp://www.securityfocus.com/bid/72901http://www.ubuntu.com/usn/USN-2521-1https://chromium.googlesource.com/chromium/blink.git/+/de1fee41e2c1bbfea7a564ad81e0b511a462fe0bhttps://code.google.com/p/chromium/issues/detail?id=454231https://security.gentoo.org/glsa/201503-12http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0627.htmlhttp://www.securityfocus.com/bid/72901http://www.ubuntu.com/usn/USN-2521-1https://chromium.googlesource.com/chromium/blink.git/+/de1fee41e2c1bbfea7a564ad81e0b511a462fe0bhttps://code.google.com/p/chromium/issues/detail?id=454231https://security.gentoo.org/glsa/201503-12
2015-03-09
Published