PT-2015-5196

CVE-2015-1290

·

Published

2015-07-21

·

Updated

2018-02-02

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 QtWebEngineCore in Qt versions prior to 5.5.1
Description The issue allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.
Recommendations For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later. For QtWebEngineCore in Qt versions prior to 5.5.1, update to version 5.5.1 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2015-1290
ALT-PU-2015-1729
ALT-PU-2015-1901
ALT-PU-2015-1902
ALT-PU-2015-1903
ALT-PU-2015-1904
ALT-PU-2015-1905
ALT-PU-2015-1906
ALT-PU-2015-1907
ALT-PU-2015-1908
ALT-PU-2015-1909
ALT-PU-2015-1910
ALT-PU-2015-1911
ALT-PU-2015-1912
ALT-PU-2015-1913
ALT-PU-2015-1914
ALT-PU-2015-1915
ALT-PU-2015-1916
ALT-PU-2015-1917
ALT-PU-2015-1918
ALT-PU-2015-1919
ALT-PU-2015-1920
ALT-PU-2016-1482
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com