CVE-2015-1280

High

Description

SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.

SeverityHigh
CVSS7.5
Exploit probability—
ProductGoogle Chrome
PublishedJul 23, 2015
First seenJul 23, 2015

How to fix

Affected products

ProductAffected versionsFixed in
google chromev ≤ 43.0.2357.134—
redhat enterprise_linux_desktop_supplementary6.0—
redhat enterprise_linux_server_supplementary6.0—
redhat enterprise_linux_server_supplementary_eus6.7z—
redhat enterprise_linux_workstation_supplementary6.0—
debian debian_linux8.0—
opensuse opensuse13.1, 13.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.