{ "schema_version": "1.4.0", "id": "GHSA-xfq2-5x2c-xp7c", "modified": "2022-05-17T03:20:49Z", "published": "2022-05-17T03:20:49Z", "aliases": [ "CVE-2015-1217" ], "details": "The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1217" }, { "type": "WEB", "url": "https://code.google.com/p/chromium/issues/detail?id=456192" }, { "type": "WEB", "url": "https://codereview.chromium.org/910683002" }, { "type": "WEB", "url": "https://codereview.chromium.org/958543002" }, { "type": "WEB", "url": "https://security.gentoo.org/glsa/201503-12" }, { "type": "WEB", "url": "https://src.chromium.org/viewvc/blink?revision=189796&view=revision" }, { "type": "WEB", "url": "http://googlechromereleases.blogspot.com/2015/03/stable-channel-update.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2015-0627.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/72901" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-2521-1" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-03-09T00:59:00Z" } }