PT-2015-7797 · Google+3 · Google Chrome+3

Published 2015-12-03 · Updated 2015-12-07 · CVE-2015-8479

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73

Description The issue is related to a use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function. This vulnerability allows attackers to cause a denial of service, specifically heap memory corruption, or possibly have other unspecified impacts by triggering access to an unauthorized audio output device.

Recommendations For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later to resolve the issue. As a temporary workaround, consider restricting access to unauthorized audio output devices to minimize the risk of exploitation.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-2054

CVE-2015-8479

RHSA-2015:2545

RHSA-2015_2545

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

References · 70

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6771.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2015-6764.md · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6770 · Exploit
• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-6769 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8479 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6787 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6781 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6764 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6784 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6770 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6779 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8480 · Security Note
• https://bdu.fstec.ru/vul/2016-00270 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6786 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6776 · Security Note