Vulnerability CVE-2015-6775: Information

Description

fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Severity: HIGH (7.5)

URL: https://nvd.nist.gov/vuln/detail/CVE-2015-6775
Published: Dec. 6, 2015
Modified: Nov. 7, 2023

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus47.0.2526.73-alt1125.0.6422.141-alt1ALT-PU-2015-2054-1154152Fixed
chromiump1047.0.2526.73-alt1119.0.6045.159-alt0.p10.1ALT-PU-2015-2054-1154152Fixed
chromiump947.0.2526.73-alt197.0.4692.99-alt0.p9.1ALT-PU-2015-2054-1154152Fixed
chromiumc10f147.0.2526.73-alt1110.0.5481.177-alt1.p10.1ALT-PU-2015-2054-1154152Fixed
chromiumc9f247.0.2526.73-alt184.0.4147.105-alt1.1.p9ALT-PU-2015-2054-1154152Fixed
chromiump1147.0.2526.73-alt1125.0.6422.141-alt1ALT-PU-2015-2054-1154152Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
    https://codereview.chromium.org/1353193004
      openSUSE-SU-2015:2290
        https://code.google.com/p/chromium/issues/detail?id=529012
          GLSA-201603-09
            78416
              DSA-3415
                openSUSE-SU-2015:2291
                  1034298

                      1. Configuration 1

                        cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
                        End including
                        46.0.2490.86
                    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                    Version: v24.5.3
                    Back to top