CVE-2015-1233

EUVD-2015-1374
Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 41.0.2272.102
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
lucid
ignored
precise
ignored
trusty
Fixed 43.0.2357.81-0ubuntu0.14.04.1.1089
released
utopic
Fixed 43.0.2357.81-0ubuntu0.14.10.1.1131
released
vivid
Fixed 43.0.2357.81-0ubuntu0.15.04.1.1170
released
wily
Fixed 43.0.2357.81-0ubuntu1.1179
released
oxide-qt
lucid
dne
precise
dne
trusty
Fixed 1.5.6-0ubuntu0.14.04.2
released
utopic
Fixed 1.5.6-0ubuntu0.14.10.1
released
vivid
Fixed 1.5.6-0ubuntu1
released
wily
Fixed 1.5.6-0ubuntu1
released
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html
http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
http://rhn.redhat.com/errata/RHSA-2015-0778.html
http://www.securityfocus.com/bid/73484
http://www.securitytracker.com/id/1032012
http://www.ubuntu.com/usn/USN-2556-1
https://code.google.com/p/chromium/issues/detail?id=469058
https://security.gentoo.org/glsa/201506-04
http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html
http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
http://rhn.redhat.com/errata/RHSA-2015-0778.html
http://www.securityfocus.com/bid/73484
http://www.securitytracker.com/id/1032012
http://www.ubuntu.com/usn/USN-2556-1
https://code.google.com/p/chromium/issues/detail?id=469058
https://security.gentoo.org/glsa/201506-04