VDB
CVE-2015-1257
CVE-2015-1257
PUBLISHED
platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.
EPSS 1.61% · 74.9th percentile
Risk Scores
EPSS Score
1.61%
74.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:14.04:LTS | chromium-browser | 0, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1 |
| Ubuntu:14.04:LTS | oxide-qt | 1.1.2-0ubuntu0.14.04.1, 1.3.4-0ubuntu0.14.04.1, 0 |
Timeline
- May 20, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Sep 12, 2023 EPSS Score
- Nov 4, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-1257 third-party-advisory
- https://src.chromium.org/viewvc/blink?view=rev&revision=193911 third-party-advisory
- https://src.chromium.org/viewvc/blink?view=rev&revision=193571 third-party-advisory
- https://code.google.com/p/chromium/issues/detail?id=468519 third-party-advisory
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html third-party-advisory
- https://ubuntu.com/security/notices/USN-2610-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-1257 third-party-advisory