PT-2015-3076 · Google+4 · Google Chrome+4

Publicado 2015-12-03 · Atualizado 2015-12-07 · CVE-2015-8480

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73

Description The issue is related to the VideoFramePool::PoolImpl::CreateFrame function in Google Chrome, which does not initialize memory for a video-frame data structure. This might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3 h loop filter c function in libavcodec/vp3dsp.c in FFmpeg.

Recommendations For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later to resolve the issue. As a temporary workaround, consider restricting the use of the VideoFramePool::PoolImpl::CreateFrame function until a patch is available. Avoid using the vp3 h loop filter c function in the affected libavcodec/vp3dsp.c file until the issue is resolved.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2054

BDU:2016-00281

CVE-2015-8480

RHSA-2015:2545

RHSA-2015_2545

Produtos afetados

Alt Linux

Ffmpeg

Google Chrome

Opera

Red Hat

Referências · 70

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6771.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6764.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6770 · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6769 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6781 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6784 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-6774 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6779 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8480 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-6773 · Nota
• https://ubuntu.com/security/CVE-2015-8480 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2015-6777 · Nota
• https://bdu.fstec.ru/vul/2016-00270 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-6780 · Nota