CVE-2017-15415 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents5 sources

Severity

6.5MEDIUMNVD

EPSS

0.7%

top 28.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Debian Linux Redhat Enterprise Linux Desktop +2 more

Timeline

PublishedAug 28

Latest updateMay 13

Description

Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶NVDgoogle/chrome< 63.0.3239.84

▶NVDredhat/enterprise_linux_server6.0

▶NVDredhat/enterprise_linux_desktop6.0

▶NVDredhat/enterprise_linux_workstation6.0

Also affects: Debian Linux 9.0

🔴Vulnerability Details

GHSA

GHSA-hcr2-3pxr-vv8v: Incorrect serialization in IPC in Google Chrome prior to 63↗2022-05-13

▶

OSV

CVE-2017-15415: Incorrect serialization in IPC in Google Chrome prior to 63↗2018-08-28

▶

📋Vendor Advisories

Red Hat

chromium-browser: pointer information disclosure in ipc call↗2017-12-06

▶

💬Community

Bugzilla

CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2↗2017-12-07

▶

Bugzilla

CVE-2017-15415 chromium-browser: pointer information disclosure in ipc call↗2017-12-07

▶

Bugzilla

▶