SB2015041905 - Input validation error in Debian Linux

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2015041905

SB2015041905 - Input validation error in Debian Linux

Published: April 19, 2015 Updated: August 9, 2020

Security Bulletin ID SB2015041905
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Input validation error (CVE-ID: CVE-2015-1245)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium "Open PDF in Reader" button that has an invalid tab association. <a href="http://cwe.mitre.org/data/definitions/416.html">CWE-416: Use After Free</a>


Remediation

Install update from vendor's website.

References