PT-2015-3160 · Google+4 · Google Chrome+4

Published 2015-12-16 · Updated 2016-12-07 · CVE-2015-8664

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.106 Opera versions prior to 47.0.2526.106

Description The issue is caused by an integer overflow in the WebCursor::Deserialize function, allowing remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions.

Recommendations For Google Chrome versions prior to 47.0.2526.106, update to version 47.0.2526.106 or later. For Opera versions prior to 47.0.2526.106, update to version 47.0.2526.106 or later. As a temporary workaround, consider restricting the use of the WebCursor::Deserialize function until a patch is available.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

ALT-PU-2015-2129

BDU:2016-00376

CVE-2015-8664

RHSA-2015:2665

RHSA-2015_2665

USN-2860-1

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

Ubuntu

References · 37

• 🔥 https://exploit-db.com/exploits/39039 · Exploit
• https://ubuntu.com/security/CVE-2015-6791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8664 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-8664 · Security Note
• https://ubuntu.com/security/CVE-2015-8548 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6791 · Security Note
• https://bdu.fstec.ru/vul/2016-00967 · Security Note
• https://ubuntu.com/security/CVE-2015-8664 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8664 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6790 · Security Note
• https://ubuntu.com/security/CVE-2015-6790 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00008 · Security Note
• https://bdu.fstec.ru/vul/2015-12270 · Security Note
• https://bdu.fstec.ru/vul/2016-00376 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6792 · Security Note