CVE-2015-1233

2015-04-0121:59:00

CWE-17

Chrome

web.nvd.nist.gov

cve-2015-1233

google chrome

remote execution

arbitrary code

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.063

Percentile

93.8%

JSON

Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

googlechromeRange≤41.0.2272.102

AND

applemacos

linuxlinux_kernel

microsoftwindows

VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
google	chrome	*	cpe:2.3:a:google:chrome::::::::
apple	macos	*	cpe:2.3:o:apple:macos::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::