NetSight
IP …
high7.5

CVE-2015-1237

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 a…

Impact

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 14.04, 14.10, 15.04
GoogleChrome
through 42.0.2311.60
DebianDebian Linux
Version 8.0

References