SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "chromium-chromedriver": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-chromedriver-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-l10n": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-chromedriver-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra": "44.0.2403.89-0ubuntu0.14.04.1.1095" } ] }