CVE-2015-1257
chromium-browser: Container-overflow in SVG.
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.
platform/graphics/filters/FEColorMatrix.cpp en la implementación SVG en Blink, utilizado en Google Chrome anterior a 43.0.2357.65, no maneja correctamente un número insuficiente de valores en un filtro feColorMatrix, lo que permite a atacantes remotosw causar una denegación de servicio (desbordamiento de contenedor) o posiblemente tener otro impacto no especificado a través de un documento manipulado.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-01-21 CVE Reserved
- 2015-05-20 CVE Published
- 2024-08-06 CVE Updated
- 2024-11-13 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/74723 | Vdb Entry | |
| http://www.securitytracker.com/id/1032375 | Vdb Entry | |
| https://code.google.com/p/chromium/issues/detail?id=468519 | X_refsource_confirm | |
| https://src.chromium.org/viewvc/blink?view=rev&revision=193571 | X_refsource_confirm | |
| https://src.chromium.org/viewvc/blink?view=rev&revision=193911 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html | 2023-11-07 | |
| http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html | 2023-11-07 | |
| http://www.debian.org/security/2015/dsa-3267 | 2023-11-07 | |
| https://security.gentoo.org/glsa/201506-04 | 2023-11-07 | |
| https://access.redhat.com/security/cve/CVE-2015-1257 | 2015-05-25 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1223264 | 2015-05-25 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | <= 42.0.2311.152 Search vendor "Google" for product "Chrome" and version " <= 42.0.2311.152" | - |
Affected
| ||||||