PT-2015-7797 · Google+3 · Google Chrome+3

Publicado 2015-12-03 · Atualizado 2015-12-07 · CVE-2015-8479

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73

Description The issue is related to a use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function. This vulnerability allows attackers to cause a denial of service, specifically heap memory corruption, or possibly have other unspecified impacts by triggering access to an unauthorized audio output device.

Recommendations For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later to resolve the issue. As a temporary workaround, consider restricting access to unauthorized audio output devices to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-2054

CVE-2015-8479

RHSA-2015:2545

RHSA-2015_2545

Produtos afetados

Alt Linux

Google Chrome

Opera

Red Hat

Referências · 70

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6771.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6764.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6770 · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6769 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8479 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6787 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6781 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6784 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-6774 · Nota
• https://access.redhat.com/security/cve/CVE-2015-6775 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6770 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6779 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8480 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2015-6773 · Nota