Vulnerability CVE-2015-1252: Information

Description

common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.

Severity: HIGH (7.5)

Published: May 20, 2015
Modified: Nov. 7, 2023
Error type identifier: CWE-119

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus43.0.2357.130-alt1124.0.6367.78-alt1ALT-PU-2015-1589-1146004Fixed
chromiump1043.0.2357.130-alt1119.0.6045.159-alt0.p10.1ALT-PU-2015-1589-1146004Fixed
chromiump943.0.2357.130-alt197.0.4692.99-alt0.p9.1ALT-PU-2015-1589-1146004Fixed
chromiumc10f143.0.2357.130-alt1110.0.5481.177-alt1.p10.1ALT-PU-2015-1589-1146004Fixed
chromiumc9f243.0.2357.130-alt184.0.4147.105-alt1.1.p9ALT-PU-2015-1589-1146004Fixed

References to Advisories, Solutions, and Tools

    1. Configuration 1

      cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
      End including
      42.0.2311.152

      Configuration 2

      cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*