Vulnerability in Oxide Project

CVE-2015-1321

Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.

EPSS: 0.020 (78.6th percentile) — read the EPSS interpretation.

Affected products

Oxide_project Oxide
Canonical Ubuntu_linux — versions 14.04, 14.10, 15.1
N/a — versions n/a

References

security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)