CVE-2015-1250
published 2015-05-01CVE-2015-1250: Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.46%
73.3th percentile
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| chrome | <= 42.0.2311.87 | — | |
| redhat | enterprise_linux_desktop_supplementary | — | — |
| redhat | enterprise_linux_server_supplementary | — | — |
| redhat | enterprise_linux_server_supplementary_eus | — | — |
| redhat | enterprise_linux_workstation_supplementary | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hh5c-mmwf-hc79: Multiple unspecified vulnerabilities in Google Chrome before 42
ghsa_unreviewed·2022-05-17
CVE-2015-1250 [HIGH] GHSA-hh5c-mmwf-hc79: Multiple unspecified vulnerabilities in Google Chrome before 42
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
OSV
oxide-qt vulnerabilities
osv·2015-05-06·CVSS 7.5
CVE-2015-1243 [HIGH] oxide-qt vulnerabilities
oxide-qt vulnerabilities
A use-after-free was discovered in the DOM implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2015-1243)
Multiple security issues were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to read uninitialized memory, cause a denial
of service via application crash or execute arbitrary code with the
privileges of the user invoking the program. (CVE-2015-1250)
OSV
CVE-2015-1250: Multiple unspecified vulnerabilities in Google Chrome before 42
osv·2015-04-30·CVSS 7.5
CVE-2015-1250 [HIGH] CVE-2015-1250: Multiple unspecified vulnerabilities in Google Chrome before 42
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Ubuntu
Oxide vulnerabilities
vendor_ubuntu·2015-05-06·CVSS 7.5
CVE-2015-1243 [HIGH] Oxide vulnerabilities
Title: Oxide vulnerabilities
Summary: Several security issues were fixed in Oxide.
A use-after-free was discovered in the DOM implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2015-1243)
Multiple security issues were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to read uninitialized memory, cause a denial
of service via application crash or execute arbitrary code with the
privileges of the user invoking the program. (CVE-2015-1250)
Instructions: In general, a standard system update wil
Red Hat
chromium-browser: various unspecified flaws
vendor_redhat·2015-01-28·CVSS 7.5
CVE-2015-1250 [HIGH] chromium-browser: various unspecified flaws
chromium-browser: various unspecified flaws
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
No detection rules found.
No public exploits indexed.
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.htmlhttp://lists.opensuse.org/opensuse-updates/2015-05/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0921.htmlhttp://www.debian.org/security/2015/dsa-3242http://www.securityfocus.com/bid/74389http://www.securitytracker.com/id/1032234http://www.ubuntu.com/usn/USN-2582-1https://code.google.com/p/chromium/issues/detail?id=453553https://code.google.com/p/chromium/issues/detail?id=458191https://code.google.com/p/chromium/issues/detail?id=473688https://code.google.com/p/chromium/issues/detail?id=475749https://code.google.com/p/chromium/issues/detail?id=481777https://security.gentoo.org/glsa/201506-04http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_28.htmlhttp://lists.opensuse.org/opensuse-updates/2015-05/msg00009.htmlhttp://rhn.redhat.com/errata/RHSA-2015-0921.htmlhttp://www.debian.org/security/2015/dsa-3242http://www.securityfocus.com/bid/74389http://www.securitytracker.com/id/1032234http://www.ubuntu.com/usn/USN-2582-1https://code.google.com/p/chromium/issues/detail?id=453553https://code.google.com/p/chromium/issues/detail?id=458191https://code.google.com/p/chromium/issues/detail?id=473688https://code.google.com/p/chromium/issues/detail?id=475749https://code.google.com/p/chromium/issues/detail?id=481777https://security.gentoo.org/glsa/201506-04
2015-05-01
Published