CVE-2015-8664 PUBLISHED

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.

EPSS 8.00% · 92.0th percentile

Risk Scores

EPSS Score
8.00%
92.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSchromium-browser0, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1
Ubuntu:14.04:LTSoxide-qt0, 1.0.0~bzr437-0ubuntu1, 1.0.0~bzr452-0ubuntu1

Timeline

References

Open in Interactive Console →