Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1251
Reference (s):
- BID:74723
- URL: http://www.securityfocus.com/bid/74723
- BUGTRAQ:20161123 CVE-2015-1251: Chrome blink SpeechÂ-RecognitionÂ-Controller use-after-free details
- URL: http://www.securityfocus.com/archive/1/539824/100/0/threaded
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html