CVE-2015-1329 - Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14

CVE-2015-1329

Summary

Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code.

References

http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1329.html
http://www.securityfocus.com/bid/76174
http://www.ubuntu.com/usn/USN-2677-1

Vulnerable Configurations

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 28-09-2017 - 17:55)
Impact:
Exploitability:

CWE

CWE-416

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	76174
confirm	http://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-1329.html
ubuntu	USN-2677-1

Last major update

28-09-2017 - 17:55

Published

20-09-2017 - 16:29

Last modified

28-09-2017 - 17:55