CVE-2015-1284: Use After Free
An unspecified use-after-free flaw was found in the blink component of the Chromium browser.
Upstream bug: https://code.google.com/p/chromium/issues/detail?id=493243
External References:
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update21.html
Other sources
The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Chrometo a version that resolves this vulnerability.Fixed in 44.0.2403.89 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 44.0.2403.89
Event History
Frequently Asked Questions
What is the vulnerability CVE-2015-1284 about?
The vulnerability CVE-2015-1284 is about an improper check for a page's maximum number of frames in Blink, allowing for a denial of service attack or possible remote code execution.
Which software versions are affected by CVE-2015-1284?
Software versions before 44.0.2403.89 of Google Chrome and Chromium Browser are affected by CVE-2015-1284.
What is the severity of the vulnerability CVE-2015-1284?
The severity of the vulnerability CVE-2015-1284 is high with a CVSS score of 7.5.
How can I fix the vulnerability CVE-2015-1284?
To fix the vulnerability CVE-2015-1284, update your Google Chrome or Chromium Browser to version 44.0.2403.89 or higher.
Where can I find more information about CVE-2015-1284?
You can find more information about CVE-2015-1284 on the CVE website, the Google Chrome Releases blog, and the Ubuntu Security Notices website.