PT-2015-3076 · Google+4 · Google Chrome+4

Published 2015-12-03 · Updated 2015-12-07 · CVE-2015-8480

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73

Description The issue is related to the VideoFramePool::PoolImpl::CreateFrame function in Google Chrome, which does not initialize memory for a video-frame data structure. This might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3 h loop filter c function in libavcodec/vp3dsp.c in FFmpeg.

Recommendations For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later to resolve the issue. As a temporary workaround, consider restricting the use of the VideoFramePool::PoolImpl::CreateFrame function until a patch is available. Avoid using the vp3 h loop filter c function in the affected libavcodec/vp3dsp.c file until the issue is resolved.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-2054

BDU:2016-00281

CVE-2015-8480

RHSA-2015:2545

RHSA-2015_2545

Affected Products

Alt Linux

Ffmpeg

Google Chrome

Opera

Red Hat

References · 70

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6771.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6764.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6770 · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6769 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6781 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6784 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6779 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8480 · Security Note
• https://ubuntu.com/security/CVE-2015-8480 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00270 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6777 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6771 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6772 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6768 · Security Note