Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-8664
HistoryDec 23, 2015 - 12:00 a.m.

CVE-2015-8664

2015-12-2300:00:00
ubuntu.com
ubuntu.com
10

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.083 Low

EPSS

Percentile

94.3%

Integer overflow in the WebCursor::Deserialize function in
content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106
allows remote attackers to cause a denial of service or possibly have
unspecified other impact via an RGBA pixel array with crafted dimensions, a
different vulnerability than CVE-2015-6792.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchchromium-browser< 47.0.2526.106-0ubuntu0.14.04.1.1107UNKNOWN
ubuntu15.04noarchchromium-browser< 47.0.2526.106-0ubuntu0.15.04.1.1192UNKNOWN
ubuntu15.10noarchchromium-browser< 47.0.2526.106-0ubuntu0.15.10.1.1218UNKNOWN
ubuntu14.04noarchoxide-qt< 1.11.4-0ubuntu0.14.04.1UNKNOWN
ubuntu15.04noarchoxide-qt< 1.11.4-0ubuntu0.15.04.1UNKNOWN
ubuntu15.10noarchoxide-qt< 1.11.4-0ubuntu0.15.10.1UNKNOWN

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.083 Low

EPSS

Percentile

94.3%