PT-2015-7357 · Google+1 · Google Chrome+2
Michal Bednarski
·
Publicado
2015-12-06
·
Atualizado
2024-06-15
·
CVE-2015-6783
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
crazy linker (aka Crazy Linker) versions prior to the version included in Google Chrome 47.0.2526.73
Google Chrome versions prior to 47.0.2526.73
Description
The issue is related to the
FindStartOffsetOfFileInZipFile function in crazy linker zip.cpp, which improperly searches for an EOCD record. This allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.Recommendations
For crazy linker (aka Crazy Linker) versions prior to the version included in Google Chrome 47.0.2526.73, update to a version included in Google Chrome 47.0.2526.73 or later.
For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome
Suse
Crazy Linker