CVE-2015-1233

Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.

Published Bychrome-cve-admin@google.com

Published DateApr 01, 2015, 21:59

Weakness Type (CWE):CWE-17

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL

References

http://googlechromereleases.blogspot.com/2015/04/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00004.html
http://lists.opensuse.org/opensuse-updates/2015-11/msg00024.html
http://rhn.redhat.com/errata/RHSA-2015-0778.html
http://www.securityfocus.com/bid/73484
http://www.securitytracker.com/id/1032012
http://www.ubuntu.com/usn/USN-2556-1
https://code.google.com/p/chromium/issues/detail?id=469058
https://security.gentoo.org/glsa/201506-04

Weakness Type (CWE):CWE-17

CVSS Metrics

Base Score

7.5

Vector String

AV:N/AC:L/Au:N/C:P/I:P/A:P

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

PARTIAL

Availability (A)

PARTIAL