CVE-2015-1237 — Use After Free in Google Chrome

CWE-416 — Use After Free9 documents6 sources
Severity
7.5HIGHNVD
OSV5.0
EPSS
1.8%
top 17.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google ChromeCanonical Ubuntu LinuxDebian Linux
Timeline
PublishedApr 19
Latest updateMay 17

Description

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome42.0.2311.60

Also affects: Debian Linux 8.0, Ubuntu Linux 14.04, 14.10, 15.04

🔴Vulnerability Details

3
GHSA
GHSA-79m3-pjgp-p5fq: Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl↗2022-05-17
▶
OSV
oxide-qt vulnerabilities↗2015-04-27
▶
OSV
CVE-2015-1237: Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl↗2015-04-19
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2015-04-27
▶
Red Hat
chromium-browser: Use-after-free in IPC↗2015-04-14
▶

💬Community

3
Bugzilla
CVE-2015-8898 ImageMagick: Prevent NULL pointer access in magick/constitute.c↗2016-06-09
▶
Bugzilla
CVE-2015-8897 ImageMagick: Crash due to out of bounds error in SpliceImage↗2016-06-09
▶
Bugzilla
CVE-2015-1237 chromium-browser: Use-after-free in IPC↗2015-04-15
▶