CVE-2015-1228: High severity ubuntu vulnerability
The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1228?
CVE-2015-1228 is classified as a denial of service vulnerability that can potentially impact system stability.
How do I fix CVE-2015-1228?
To mitigate CVE-2015-1228, update Google Chrome to the latest version or apply the appropriate security patches for the affected Linux distributions.
Which versions of Google Chrome are affected by CVE-2015-1228?
CVE-2015-1228 affects Google Chrome versions up to 40.0.2214.115.
Which Linux distributions are affected by CVE-2015-1228?
CVE-2015-1228 impacts Ubuntu Linux versions 14.04 and 14.10, as well as Red Hat Enterprise Linux versions 6.0 and 6.6.z.
What could an attacker achieve by exploiting CVE-2015-1228?
An attacker exploiting CVE-2015-1228 could cause a denial of service condition leading to application crashes.