CVE-2015-1221

EUVD-2015-1362
Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 40.0.2214.115
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 41.0.2272.76-0ubuntu0.14.04.1.1076
released
utopic
Fixed 41.0.2272.76-0ubuntu0.14.10.1.1118
released
vivid
Fixed 41.0.2272.76-0ubuntu1.1134
released
wily
Fixed 41.0.2272.76-0ubuntu1.1134
released
oxide-qt
lucid
dne
precise
dne
trusty
Fixed 1.5.5-0ubuntu0.14.04.3
released
utopic
Fixed 1.5.5-0ubuntu0.14.10.2
released
vivid
Fixed 1.5.5-0ubuntu1
released
wily
Fixed 1.5.5-0ubuntu1
released