Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1321
Reference (s):
- UBUNTU:USN-2570-1
- URL: http://www.ubuntu.com/usn/USN-2570-1