Back
CVE-2015-8664
HIGH
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
Published: Dec 24, 2015
Modified: Jun 17, 2026
CWE-189
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| chrome | * |
GitHub Security Advisory GHSA-4wq5-7mhx-9xh5
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in...
References (14)
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
- http://www.securityfocus.com/bid/79686
- http://www.securitytracker.com/id/1034491
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=565023
- https://code.google.com/p/chromium/issues/detail?id=569486
- https://codereview.chromium.org/1498903003
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
- http://www.securityfocus.com/bid/79686
- http://www.securitytracker.com/id/1034491
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=565023
- https://code.google.com/p/chromium/issues/detail?id=569486
- https://codereview.chromium.org/1498903003
Risk Scores
CVSS Score
8.8 / 10
EPSS Score
5.23%
Top 8% most likely to be exploited
Threat Score
36.8 / 100
Data Sources
NVD
EPSS
GitHub