Your submission was sent successfully! Close

CVE-2015-1245

Published: 19 April 2015

Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association.

Priority

Medium

Status

Package Release Status
chromium-browser
Launchpad, Ubuntu, Debian
Upstream
Released (42.0.2311.90)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (43.0.2357.81-0ubuntu1.1179)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [43.0.2357.81-0ubuntu0.14.04.1.1089])
oxide-qt
Launchpad, Ubuntu, Debian
Upstream Not vulnerable

Ubuntu 16.04 ESM (Xenial Xerus) Not vulnerable

Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was not-affected)