CVE-2015-1257 | BDVDB-2026-69504 Detail
Description#
platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://src.chromium.org/viewvc/blink?view=rev&revision=193911
- http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
- https://src.chromium.org/viewvc/blink?view=rev&revision=193571
- https://code.google.com/p/chromium/issues/detail?id=468519
- https://security.gentoo.org/glsa/201506-04
- http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html
- http://www.securitytracker.com/id/1032375
- http://www.debian.org/security/2015/dsa-3267
- http://www.securityfocus.com/bid/74723
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.