Kaspersky ID:
KLA10463
Дата обнаружения:
03/03/2015
Обновлено:
08/04/2025

Описание

Multiple critical vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions or inject arbitrary code.

Below is a complete list of vulnerabilities

  1. Name conflict can be exploited remotely via a specially designed JavaScript;
  2. An use-after-free vulnerability can be exploited remotely via incorrect operating with Web SQL Database, a specially designed GIF image, moving SCIPT element to different documents, vectors related to caching notifiers, vectors related to read-only fields or invalid input, vectors related to frame detachment;
  3. Lack of parameters check can be exploited remotely via a specially designed VPx video;
  4. Unknown vulnerability can be exploited remotely via vectors related to PDFium and Skia;
  5. Improper URL restrictions can be exploited remotely via a specially designed extension;
  6. Problems with memory initialization can be exploited remotely via a specially designed image;
  7. Integer overflow can be exploited remotely via vectors related to memory allocation;
  8. Integer overflow and out-of-bounds write operation can be exploited remotely via vectors related to Skia;
  9. Improper compile listners can be exploited remotely via vectors related to Blink;
  10. Lack of realyout operation enforcement and memory initialization can be exploited remotely via specially designed CSS;
  11. Improper handling of 407 status can be exploited remotely via specially designed response.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2015-1223
    high
  • CVE-2015-1222
    high
  • CVE-2015-1218
    high
  • CVE-2015-1230
    high
  • CVE-2015-1227
    high
  • CVE-2015-1226
    warning
  • CVE-2015-1225
    warning
  • CVE-2015-1224
    warning
  • CVE-2015-1221
    high
  • CVE-2015-1213
    high
  • CVE-2015-1212
    high
  • CVE-2015-1228
    high
  • CVE-2015-1229
    warning
  • CVE-2015-1214
    high
  • CVE-2015-1220
    high
  • CVE-2015-1219
    high
  • CVE-2015-1217
    high
  • CVE-2015-1215
    high
  • CVE-2015-1216
    high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.