CVE-2015-1230

EUVD-2015-1371
The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 40.0.2214.115
canonicalubuntu_linux
14.04
canonicalubuntu_linux
14.10
redhatenterprise_linux_desktop_supplementary
6.0
redhatenterprise_linux_server_supplementary
6.0
redhatenterprise_linux_server_supplementary_eus
6.6.z:z
redhatenterprise_linux_workstation_supplementary
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
artful
Fixed 41.0.2272.76-0ubuntu1.1134
released
bionic
Fixed 41.0.2272.76-0ubuntu1.1134
released
cosmic
Fixed 41.0.2272.76-0ubuntu1.1134
released
lucid
ignored
precise
ignored
trusty
Fixed 41.0.2272.76-0ubuntu0.14.04.1.1076
released
utopic
Fixed 41.0.2272.76-0ubuntu0.14.10.1.1118
released
vivid
Fixed 41.0.2272.76-0ubuntu1.1134
released
wily
Fixed 41.0.2272.76-0ubuntu1.1134
released
xenial
Fixed 41.0.2272.76-0ubuntu1.1134
released
yakkety
Fixed 41.0.2272.76-0ubuntu1.1134
released
zesty
Fixed 41.0.2272.76-0ubuntu1.1134
released
libv8-3.14
artful
ignored
bionic
ignored
cosmic
ignored
lucid
dne
precise
dne
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
ignored
yakkety
ignored
zesty
ignored
oxide-qt
artful
Fixed 1.5.5-0ubuntu1
released
bionic
dne
cosmic
dne
lucid
dne
precise
dne
trusty
Fixed 1.5.5-0ubuntu0.14.04.3
released
utopic
Fixed 1.5.5-0ubuntu0.14.10.2
released
vivid
Fixed 1.5.5-0ubuntu1
released
wily
Fixed 1.5.5-0ubuntu1
released
xenial
Fixed 1.5.5-0ubuntu1
released
yakkety
Fixed 1.5.5-0ubuntu1
released
zesty
Fixed 1.5.5-0ubuntu1
released