CVE-2015-1270

Published: Jul 23, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.

Affected (9)

Products: Google: Chrome · Redhat: Enterprise Linux Desktop Supplementary, Enterprise Linux Server Supplementary, Enterprise Linux Server Supplementary Eus, Enterprise Linux Workstation Supplementary · Opensuse: Opensuse · +2 more

Show all products

Google: Chrome · Redhat: Enterprise Linux Desktop Supplementary, Enterprise Linux Server Supplementary, Enterprise Linux Server Supplementary Eus, Enterprise Linux Workstation Supplementary · Opensuse: Opensuse · Debian: Debian Linux · Oracle: Solaris

1 product

4 products

Enterprise Linux Desktop Supplementary

Enterprise Linux Server Supplementary

Enterprise Linux Server Supplementary Eus

Enterprise Linux Workstation Supplementary

1 product

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Up to 43.0.2357.134

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop Supplementary	Version 6.0
Redhat Enterprise Linux Server Supplementary	Version 6.0
Redhat Enterprise Linux Server Supplementary Eus	Version 6.7z
Redhat Enterprise Linux Workstation Supplementary	Version 6.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Solaris	Version 11.3

Related CWEs

References (26)

http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2015-1499.html

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2015/dsa-3315

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2015/dsa-3360

Source: chrome-cve-admin@google.com

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: chrome-cve-admin@google.com

http://www.securityfocus.com/bid/75973

Source: chrome-cve-admin@google.com

http://www.securitytracker.com/id/1033031

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-2740-1

Source: chrome-cve-admin@google.com

https://chromium.googlesource.com/chromium/deps/icu/+/f1ad7f9ba957571dc692ea3e187612c685615e19

Source: chrome-cve-admin@google.com

https://code.google.com/p/chromium/issues/detail?id=444573

Source: chrome-cve-admin@google.com

https://codereview.chromium.org/1157143002/

Source: chrome-cve-admin@google.com

https://security.gentoo.org/glsa/201603-09

Source: chrome-cve-admin@google.com

http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-1499.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3315

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3360

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/75973

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033031

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-2740-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://chromium.googlesource.com/chromium/deps/icu/+/f1ad7f9ba957571dc692ea3e187612c685615e19

Source: af854a3a-2127-422b-91ae-364da2661108

https://code.google.com/p/chromium/issues/detail?id=444573

Source: af854a3a-2127-422b-91ae-364da2661108

https://codereview.chromium.org/1157143002/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201603-09

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.