CVE-2015-6792
published 2015-12-24CVE-2015-6792: The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code…
PriorityP340critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
3.96%
89.4th percentile
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 47.0.2526.80 | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gr4r-9v54-jxjh: The MIDI subsystem in Google Chrome before 47
ghsa_unreviewed·2022-05-17·CVSS 8.8
CVE-2015-6792 [HIGH] GHSA-gr4r-9v54-jxjh: The MIDI subsystem in Google Chrome before 47
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
GHSA
GHSA-4wq5-7mhx-9xh5: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor
ghsa_unreviewed·2022-05-17·CVSS 9.8
CVE-2015-8664 [CRITICAL] GHSA-4wq5-7mhx-9xh5: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
OSV
CVE-2015-6792: The MIDI subsystem in Google Chrome before 47
osv·2015-12-24·CVSS 9.8
CVE-2015-6792 [CRITICAL] CVE-2015-6792: The MIDI subsystem in Google Chrome before 47
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
OSV
CVE-2015-8664: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor
osv·2015-12-23·CVSS 9.8
CVE-2015-8664 [CRITICAL] CVE-2015-8664: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
Red Hat
chromium-browser: Use-After-free in MidiHost
vendor_redhat·2015-12-23·CVSS 9.8
CVE-2015-8664 [CRITICAL] CWE-416 chromium-browser: Use-After-free in MidiHost
chromium-browser: Use-After-free in MidiHost
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
Red Hat
chromium-browser: Fixes from internal audits and fuzzing
vendor_redhat·2015-12-15·CVSS 9.8
CVE-2015-6792 [CRITICAL] chromium-browser: Fixes from internal audits and fuzzing
chromium-browser: Fixes from internal audits and fuzzing
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-8664 chromium-browser: Use-After-free in MidiHost
bugzilla·2015-12-30·CVSS 9.8
CVE-2015-8664 [CRITICAL] CVE-2015-8664 chromium-browser: Use-After-free in MidiHost
CVE-2015-8664 chromium-browser: Use-After-free in MidiHost
Common Vulnerabilities and Exposures assigned an identifier CVE-2015-8664 to
the following vulnerability:
Name: CVE-2015-8664
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8664
Assigned: 20151223
Reference: CONFIRM:http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
Reference: CONFIRM:https://code.google.com/p/chromium/issues/detail?id=565023
Reference: CONFIRM:https://code.google.com/p/chromium/issues/detail?id=569486
Reference: CONFIRM:https://codereview.chromium.org/1498903003
Integer overflow in the WebCursor::Deserialize function in
content/common/cursors/webcursor.cc in Google Chrome before
47.0.2526.106 allows remote attackers to cause a denial of service or
possibly have unspecifi
Bugzilla
CVE-2015-6792 chromium-browser: Fixes from internal audits and fuzzing
bugzilla·2015-12-16·CVSS 9.8
CVE-2015-6792 [CRITICAL] CVE-2015-6792 chromium-browser: Fixes from internal audits and fuzzing
CVE-2015-6792 chromium-browser: Fixes from internal audits and fuzzing
As per chromium upstream security advisory:
The stable channel has been updated to 47.0.2526.106 for Windows, Mac, and Linux.
This update includes 2 security fixes as part of our ongoing internal security work:
[569486] CVE-2015-6792: Fixes from internal audits and fuzzing.
Upstream bug:
https://code.google.com/p/chromium/issues/detail?id=569486
External References:
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
Discussion:
This issue has been addressed in the following products:
Supplementary for Red Hat Enterprise Linux 6
Via RHSA-2015:2665 https://rhn.redhat.com/errata/RHSA-2015-2665.html
---
As per:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6792
This issue
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.htmlhttp://rhn.redhat.com/errata/RHSA-2015-2665.htmlhttp://www.debian.org/security/2016/dsa-3456http://www.securityfocus.com/bid/79348http://www.securitytracker.com/id/1034491https://code.google.com/p/chromium/issues/detail?id=564501https://code.google.com/p/chromium/issues/detail?id=569486https://codereview.chromium.org/1500153002https://codereview.chromium.org/1508563003https://security.gentoo.org/glsa/201603-09http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00029.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-12/msg00030.htmlhttp://rhn.redhat.com/errata/RHSA-2015-2665.htmlhttp://www.debian.org/security/2016/dsa-3456http://www.securityfocus.com/bid/79348http://www.securitytracker.com/id/1034491https://code.google.com/p/chromium/issues/detail?id=564501https://code.google.com/p/chromium/issues/detail?id=569486https://codereview.chromium.org/1500153002https://codereview.chromium.org/1508563003https://security.gentoo.org/glsa/201603-09
2015-12-24
Published