CVE-2015-1228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76

Description The issue is related to the RenderCounter::updateCounter function in Blink, which does not force a relayout operation and consequently does not initialize memory for a data structure. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.

Recommendations For Google Chrome versions prior to 41.0.2272.76, update to version 41.0.2272.76 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted CSS token sequences to minimize the risk of exploitation.