PT-2017-6478 · Google+1 · Google Chrome+1

Inferno · Published 2015-03-20 · Updated 2017-11-01 · CVE-2015-1206

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to M40

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service, resulting in an unpaged memory write and process crash, via a crafted MP4 file.

Recommendations For versions prior to M40, update to version M40 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1298

CVE-2015-1206

Affected Products

Alt Linux

Google Chrome

References · 39

• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=453979 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1225 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1215 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1206 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1227 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1217 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1224 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2239 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1231 · Security Note
• https://bdu.fstec.ru/vul/2015-09972 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1213 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1232 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1222 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1228 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-5319 · Security Note