Denial of Service (DoS) Affecting chromium package, versions [,44.0.2403.89)


Severity

Recommended
0.0
high
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
2.33% (82nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-CHROMIUM-2409387
  • published26 Jan 2022
  • disclosed1 May 2015
  • creditUnknown

Introduced: 1 May 2015

CVE-2015-1243  (opens in a new tab)
CWE-400  (opens in a new tab)

How to fix?

Upgrade chromium to version 44.0.2403.89 or higher.

Overview

Affected versions of this package are vulnerable to Denial of Service (DoS). Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

References

CVSS Base Scores

version 3.1