Vulnerability Details : CVE-2015-1321
Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.
Vulnerability category: Memory CorruptionExecute codeDenial of service
Products affected by CVE-2015-1321
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.1:*:*:*:*:*:*:*
- cpe:2.3:a:oxide_project:oxide:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-1321
1.39%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 79 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-1321
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
References for CVE-2015-1321
-
http://www.ubuntu.com/usn/USN-2570-1
USN-2570-1: Oxide vulnerabilities | Ubuntu security notices
Jump to