high7.5

CVE-2015-1277

Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or p…

Impact

Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.

Affected products

Vendor	Product	Affected versions
Google	Chrome	through 43.0.2357.134
Debian	Debian Linux	Version 8.0
Redhat	Enterprise Linux Desktop Supplementary	Version 6.0
Redhat	Enterprise Linux Server Supplementary	Version 6.0
Redhat	Enterprise Linux Server Supplementary Eus	Version 6.7z
Redhat	Enterprise Linux Workstation Supplementary	Version 6.0
Opensuse	Opensuse	Versions 13.1, 13.2

References

NVD record
CVE.org record
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html
http://rhn.redhat.com/errata/RHSA-2015-1499.html
http://www.debian.org/security/2015/dsa-3315
http://www.securityfocus.com/bid/75973
http://www.securitytracker.com/id/1033031
https://code.google.com/p/chromium/issues/detail?id=479743
https://codereview.chromium.org/1144363004/
https://codereview.chromium.org/1151393006/
https://security.gentoo.org/glsa/201603-09
http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html
http://rhn.redhat.com/errata/RHSA-2015-1499.html
http://www.debian.org/security/2015/dsa-3315
http://www.securityfocus.com/bid/75973
http://www.securitytracker.com/id/1033031
https://code.google.com/p/chromium/issues/detail?id=479743
https://codereview.chromium.org/1144363004/
https://codereview.chromium.org/1151393006/
https://security.gentoo.org/glsa/201603-09