Oxide vulnerabilities

2015-05-0600:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.021

Percentile

89.2%

JSON

Releases

Ubuntu 15.04
Ubuntu 14.10
Ubuntu 14.04 ESM

Packages

oxide-qt - Web browser engine library for Qt (QML plugin)

Details

A use-after-free was discovered in the DOM implementation in Blink. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via renderer
crash, or execute arbitrary code with the privileges of the sandboxed
render process. (CVE-2015-1243)

Multiple security issues were discovered in Chromium. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to read uninitialized memory, cause a denial
of service via application crash or execute arbitrary code with the
privileges of the user invoking the program. (CVE-2015-1250)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchliboxideqtcore0< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchliboxideqt-qmlplugin< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchliboxideqtquick0< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-chromedriver< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-codecs< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-codecs-dbg< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-codecs-extra< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-codecs-extra-dbg< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchoxideqt-dbg< 1.6.6-0ubuntu0.15.04.1UNKNOWN
Ubuntu14.10noarchliboxideqtcore0< 1.6.6-0ubuntu0.14.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.04	noarch	liboxideqtcore0	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	liboxideqt-qmlplugin	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	liboxideqtquick0	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-chromedriver	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-codecs	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-codecs-dbg	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-codecs-extra	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-codecs-extra-dbg	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	oxideqt-dbg	< 1.6.6-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	14.10	noarch	liboxideqtcore0	< 1.6.6-0ubuntu0.14.10.1	UNKNOWN