CVE:CVE-2015-1209
CNNVD:CNNVD-201502-118
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Blink是美国谷歌（Google）公司和挪威欧朋（Opera Software）公司共同开发的一套浏览器排版引擎（渲染引擎）。
Google Chrome中使用的Blink的DOM实现过程中的core/editing/VisibleSelection.cpp文件中的‘VisibleSelection::nonBoundaryShadowTreeRootNode’函数存在释放后重用漏洞。远程攻击者可借助特制的JavaScript代码利用该漏洞造成拒绝服务。以下版本受到影响：基于Windows、OS X和Linux平台的Google Chrome 40.0.2214.93及之前版本，基于Android平台的Google Chrome 40.0.2214.89及之前版本。
solution:Upgrade google chrome to a higher version than 40.0.2214.109,40.0.2214.111,and avoid the version (,40.0.2214.109),(,40.0.2214.111); Upgrade canonical ubuntu_linux to a higher version than 14.04,14.10,and avoid the version 14.04,14.10; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,and avoid the version 6.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2