CVE-2015-1282
Severity
6.8MEDIUM
EPSS
2.0%
top 16.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 23
Latest updateMay 14
Description
Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4
Affected Packages5 packages
Also affects: Debian Linux 8.0, Enterprise Linux 6.0, 6.7z
🔴Vulnerability Details
3GHSA▶
GHSA-46rh-vrxm-9qp6: Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document↗2022-05-14
CVEList▶
CVE-2015-1282: Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document↗2015-07-23
OSV▶
CVE-2015-1282: Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document↗2015-07-23