CVE-2015-5605

Vulnerabilidad en la implementación de expresiones regulares en Google V8 de Google Chrome en versiones anteriores a la 44.0.2403.89, no maneja correctamente las interrupciones, lo cual permite a atacantes remotos causar una denegación de servicio mediante la caída de la aplicación a través de código JavaScript manipulado, como se demuestra por un error en la recolección de desperdicios durante la asignación de un mensaje de excepción de desbordamiento de pila.

An uninitialized value issue was discovered in ICU. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. A use-after-free was discovered in the GPU process implementation in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.