7.5
CVSSv2

CVE-2015-1317

Published: 08/04/2015 Updated: 29/09/2015
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Use-after-free vulnerability in Oxide prior to 1.5.6 and 1.6.x prior to 1.6.1 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.

Vulnerable Product Search on Vulmon Subscribe to Product

canonical ubuntu linux 14.10

canonical ubuntu linux 14.04

oxide project oxide 1.6.0

oxide project oxide

Vendor Advisories

Several security issues were fixed in Oxide ...