CVE-2015-1276: Use After Free
An unspecified use-after-free flaw was found in the IndexedDB component of the Chromium browser.
Upstream bug: https://code.google.com/p/chromium/issues/detail?id=472614
External References:
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update21.html
Other sources
Use-after-free vulnerability in content/browser/indexeddb/indexeddb ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Chrometo a version that resolves this vulnerability.Fixed in 44.0.2403.89 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 44.0.2403.89
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1276?
The severity of CVE-2015-1276 is critical with a CVSS score of 9.8.
How does CVE-2015-1276 affect Google Chrome?
CVE-2015-1276 allows remote attackers to cause a denial of service or possibly have unspecified other impact on Google Chrome versions before 44.0.2403.89.
How can I fix CVE-2015-1276 on Ubuntu 14.04?
You can fix CVE-2015-1276 on Ubuntu 14.04 by updating the chromium-browser package to version 44.0.2403.89-0ubuntu0.14.04.1.1095.
Where can I find more information about CVE-2015-1276?
You can find more information about CVE-2015-1276 on the Mitre CVE website.