NetSight
high7.5

CVE-2015-1243

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Googl…

Impact

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

Affected products

VendorProductAffected versions
GoogleChrome
through 42.0.2311.87
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 14.10, 15.04
RedhatEnterprise Linux Desktop Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary
Version 6.0
RedhatEnterprise Linux Server Supplementary Eus
Version 6.6.z
RedhatEnterprise Linux Workstation Supplementary
Version 6.0

References