CVE Vulnerabilities

CVE-2015-1220

Published: Mar 09, 2015 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 IMPORTANT
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.

Affected Software

NameVendorStart VersionEnd Version
Enterprise_linux_desktop_supplementaryRedhat6.0 (including)6.0 (including)
Enterprise_linux_server_supplementaryRedhat6.0 (including)6.0 (including)
Enterprise_linux_server_supplementary_eusRedhat6.6.z (including)6.6.z (including)
Enterprise_linux_workstation_supplementaryRedhat6.0 (including)6.0 (including)
Supplementary for Red Hat Enterprise Linux 6RedHatchromium-browser-0:41.0.2272.76-1.el6_6*
Chromium-browserUbuntudevel*
Chromium-browserUbuntulucid*
Chromium-browserUbuntuprecise*
Chromium-browserUbuntutrusty*
Chromium-browserUbuntuupstream*
Chromium-browserUbuntuutopic*
Chromium-browserUbuntuvivid*
Chromium-browserUbuntuwily*
Oxide-qtUbuntudevel*
Oxide-qtUbuntutrusty*
Oxide-qtUbuntuupstream*
Oxide-qtUbuntuutopic*
Oxide-qtUbuntuvivid*
Oxide-qtUbuntuwily*

References