CVE-2015-1282: Use After Free
Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1282?
CVE-2015-1282 is rated with a high severity as it can lead to denial of service and potentially other unspecified impacts.
How do I fix CVE-2015-1282?
To fix CVE-2015-1282, update Google Chrome to version 44.0.2403.89 or later, along with updating any affected versions of openSUSE or Red Hat products.
What types of systems are affected by CVE-2015-1282?
CVE-2015-1282 affects Google Chrome versions prior to 44.0.2403.89, as well as various versions of openSUSE and Red Hat operating systems.
Can CVE-2015-1282 be exploited remotely?
Yes, CVE-2015-1282 can be exploited remotely through crafted PDF documents.
What are the consequences of CVE-2015-1282?
The exploitation of CVE-2015-1282 can lead to application crashes and potential denial of service.