PT-2015-2869 · Google+3 · Google Chrome+4

Published 2015-12-14 · Updated 2016-12-07 · CVE-2015-8548

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.80 Google V8 versions prior to 4.7.80.23

Description The issue is caused by multiple unspecified vulnerabilities in Google V8, which is used in Google Chrome. These vulnerabilities allow attackers to cause a denial of service or possibly have other impact via unknown vectors. The vulnerabilities can be exploited by a remote attacker to disrupt service or have other effects on the system.

Recommendations For Google Chrome versions prior to 47.0.2526.80, update to version 47.0.2526.80 or later to resolve the issue. For Google V8 versions prior to 4.7.80.23, update to version 4.7.80.23 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-12235

CVE-2015-8548

DSA-3418-1

RHSA-2015:2618

RHSA-2015_2618

USN-2860-1

Affected Products

Google Chrome

Google V8

Opera

Red Hat

Ubuntu

References · 37

• https://ubuntu.com/security/CVE-2015-6791 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12255 · Security Note
• https://security-tracker.debian.org/tracker/source-package/chromium-browser · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8548 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6791 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-8548 · Security Note
• https://bdu.fstec.ru/vul/2016-00967 · Security Note
• https://ubuntu.com/security/CVE-2015-8664 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8664 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6790 · Security Note
• https://bdu.fstec.ru/vul/2016-00008 · Security Note
• https://ubuntu.com/security/CVE-2015-6790 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00376 · Security Note
• http://ubuntu.com/usn/USN-2860-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6789 · Security Note