CVE-2015-1276 The advisory has been revoked - it doesn't affect any version of package chromium-browser  (opens in a new tab)


Threat Intelligence

EPSS
1.6% (75th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1410-CHROMIUMBROWSER-412080
  • published23 Jul 2015
  • disclosed23 Jul 2015

Introduced: 23 Jul 2015

CVE-2015-1276  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:14.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream chromium-browser package and not the chromium-browser package as distributed by Ubuntu.

Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.