CVE Database
/

CVE-2015-1218

Back to search

CVE-2015-1218

Published: Mar 9, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-2521-1
vendor-advisory
x_refsource_UBUNTU
72901
vdb-entry
x_refsource_BID
GLSA-201503-12
vendor-advisory
x_refsource_GENTOO
RHSA-2015:0627
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now