CVE-2015-1321

Published: Apr 29, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.

Affected (4)

Products: Canonical: Ubuntu Linux · Oxide Project: Oxide

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10
Canonical Ubuntu Linux	Version 15.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Oxide Project Oxide	Up to 1.6.4

References (2)

http://www.ubuntu.com/usn/USN-2570-1

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-2570-1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.