Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Chrome, Ubuntu and Red Hat Linux may crash via CSS

CVE-2015-1228 · published 11 years ago
Summary

A part of the web page rendering code in Google Chrome (versions before 41.0.2272.76) and the same component used in Ubuntu Linux and Red Hat Enterprise Linux does not set up memory correctly. An attacker can send a specially crafted style sheet that forces the browser to stop working, causing a crash. Update Chrome to the latest version and apply the latest OS security updates for Ubuntu and Red Hat to fix the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
canonical ubuntu_linux 14.04
14.10
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
google chrome <= 40.0.2214.115
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
redhat enterprise_linux_desktop_supplementary 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*
redhat enterprise_linux_server 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
redhat enterprise_linux_server_supplementary_eus 6.6.z
cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.6.z:*:*:*:*:*:*:*
redhat enterprise_linux_workstation_supplementary 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*
Original advisory text
The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not i...
The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published9 Mar 2015
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-1228 · NVD
Track software like this
Free during beta