CVE-2015-1245 — Use After Free in Google Chrome

CWE-416 — Use After Free5 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
1.8%
top 17.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeDebian Linux
Timeline
PublishedApr 19
Latest updateMay 17

Description

Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome41.0.2272.74

Also affects: Debian Linux 7.0

🔴Vulnerability Details

2
GHSA
GHSA-vwmq-8w98-3hr8: Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view↗2022-05-17
▶
OSV
CVE-2015-1245: Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view↗2015-04-19
▶

📋Vendor Advisories

1
Red Hat
chromium-browser: Use-after-free in PDFium↗2015-04-14
▶

💬Community

1
Bugzilla
CVE-2015-1245 chromium-browser: Use-after-free in PDFium↗2015-04-15
▶