Lucene search
PRIOn knowledge basePRION:CVE-2015-6783HistoryDec 06, 2015 - 1:59 a.m.
Input validation
2015-12-0601:59:00
PRIOn knowledge base
www.prio-n.com
3
The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.
References
lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
www.securityfocus.com/bid/78416
www.securitytracker.com/id/1034298
chromium.googlesource.com/chromium/src.git/+/d9e316238aee59acf665d80b544cf4e1edfd3349
code.google.com/p/chromium/issues/detail?id=537205
googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
security.gentoo.org/glsa/201603-09
Related
nvd
nvd
CVE-2015-6783
2015-12-06 01:59:20
cve
cve
CVE-2015-6783
2015-12-06 01:59:20
ubuntucve
ubuntucve
CVE-2015-6783
2015-12-06 00:00:00
cvelist
cvelist
CVE-2015-6783
2015-12-06 01:00:00
debiancve
debiancve
CVE-2015-6783
2015-12-06 01:59:00
threatpost
threatpost
Google Plans to End Chrome for 32-bit Linux, Releases Chrome 47
2015-12-02 11:18:45
nessus
nessus
Google Chrome < 47.0.2526.73 Multiple Vulnerabilities (Mac OS X)
2015-12-04 00:00:00
Google Chrome < 47.0.2526.73 Multiple Vulnerabilities
2015-12-04 00:00:00
chrome
chrome
Stable Channel Update
2015-12-01 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2015-12-01 00:00:00
kaspersky
kaspersky
KLA10703 Multiple vulnerabilities in Google Chrome
2015-12-01 00:00:00
suse
suse
Security update for Chromium (important)
2015-12-17 13:10:52
Security update for Chromium (important)
2015-12-17 13:11:20
openvas
openvas
openSUSE: Security Advisory for Chromium (openSUSE-SU-2015:2290-1)
2015-12-18 00:00:00
Gentoo Security Advisory GLSA 201603-09
2016-03-14 00:00:00
gentoo
gentoo
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00