[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Row-hammer vulnerability in Google Chrome by leveraging the ability to run a crafted program (rpm)

ID: oval:org.secpod.oval:def:26797Date: (C)2015-09-24   (M)2022-10-10
Class: VULNERABILITYFamily: unix




The host is installed with Google Chrome before 42.0.2311.90 and is prone to a row-hammer vulnerability. A flaw is present in the application, which does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes. Successful exploitation could allow attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.

Platform:
Linux
Product:
Google Chrome
Reference:
CVE-2015-3335
CVE    1
CVE-2015-3335
CPE    3
cpe:/a:google:chrome:::x64
cpe:/a:google:chrome:::x86
cpe:/a:google:chrome:42.0.2311.60

© SecPod Technologies