CVE-2015-1250

chromium-browser: various unspecified flaws

Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Canonical Debian Google and 1 more

Products

Ubuntu Linux Debian Linux Chrome and 5 more

CVE-2015-1251

chromium-browser: Use-after-free in Speech.

Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1252

chromium-browser: Sandbox escape in Chrome.

common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.

CVSS 2.0 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1253

chromium-browser: Cross-origin bypass in DOM.

core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1254

chromium-browser: Cross-origin bypass in Editing.

core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1255

chromium-browser: Use-after-free in WebAudio.

Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.

CVSS 2.0 · 6.8 Medium EPSS 1.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1256

chromium-browser: Use-after-free in SVG.

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1257

chromium-browser: Container-overflow in SVG.

platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1258

chromium-browser: Negative-size parameter in Libvpx.

Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1259

chromium-browser: Uninitialized value in PDFium.

PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1260

chromium-browser: Use-after-free in WebRTC.

Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1261

chromium-browser: URL bar spoofing in unspecified component

android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1262

chromium-browser: Uninitialized value in Blink.

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1263

chromium-browser: insecure download of spellcheck dictionary in unspecified component

The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1264

chromium-browser: Cross-site scripting in bookmarks.

Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1265

chromium-browser: Various fixes from internal audits, fuzzing and other initiatives.

Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 7.9% KEV · Not listed

Vendors

Debian Google Redhat

Products

Debian Linux Chrome Rhel Extras

CVE-2015-1270

ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89

The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed

Vendors

Debian Google Opensuse and 2 more

Products

Debian Linux Chrome Opensuse and 6 more

CVE-2015-1271

chromium-browser: Heap-buffer-overflow in pdfium

PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1272

chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified

Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more

CVE-2015-1273

chromium-browser: Heap-buffer-overflow in pdfium.

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Google Opensuse and 1 more

Products

Debian Linux Chrome Opensuse and 5 more