// For flags

CVE-2015-6787

pdfium - CPDF_Function::Call Stack Buffer Overflow

Severity Score

10.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

3
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Múltiples vulnerabilidades no especificadas en Google Chrome en versiones anteriores a 47.0.2526.73 permiten a atacantes causar una denegación de servicio o posiblemente tener otro impacto a través de vectores desconocidos.

Pdfium suffers from a heap-based out-of-bounds read in CPDF_DIBSource:DownSampleScanline32Bit.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-08-31 CVE Reserved
  • 2015-12-03 CVE Published
  • 2023-11-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
References (25)
URL Tag Source
http://googlechromereleases.blogspot.com/2015/12/stable-channel-update.html X_refsource_confirm
http://www.securitytracker.com/id/1034298 Vdb Entry
https://code.google.com/p/chromium/issues/detail?id=525330 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=526286 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=526441 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=529554 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=534621 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=537823 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=540949 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=545173 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=551460 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=551503 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=552046 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=554115 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=554151 X_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=563930 X_refsource_confirm
URL Date SRC
https://www.exploit-db.com/exploits/39165 2024-08-06
https://www.exploit-db.com/exploits/39162 2024-08-06
https://www.exploit-db.com/exploits/39163 2024-08-06
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html 2023-11-07
http://www.ubuntu.com/usn/USN-2825-1 2023-11-07
https://security.gentoo.org/glsa/201603-09 2023-11-07
https://access.redhat.com/security/cve/CVE-2015-6787 2015-12-03
https://bugzilla.redhat.com/show_bug.cgi?id=1287502 2015-12-03
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Google
Search vendor "Google"
 Chrome
Search vendor "Google" for product "Chrome"
 <= 46.0.2490.86
Search vendor "Google" for product "Chrome" and version " <= 46.0.2490.86"
-
Affected