Skip to content
OpenAdvisories
Unscored CVE-2015-1217 EUVD-2015-1358GHSA-xfq2-5x2c-xp7c

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in…

Published Mar 9, 2015 · Updated Aug 6, 2024 · Assigned by Chrome

Description

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 14.04 LTS chromium-browser 41.0.2272.76-0ubuntu0.14.04.1.1076 —
Ubuntu 14.04 LTS oxide-qt 1.5.5-0ubuntu0.14.04.3 USN-2521-1
ReleasePackageFixed inAdvisory
RHEL 6 chromium-browser 41.0.2272.76-1.el6_6 RHSA-2015:0627
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 55.0.2883.75-3.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:10171-1

Advisories 4

References