PT-2015-7357
CVE-2015-6783
·
تاريخ النشر
2015-12-06
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
crazy linker (aka Crazy Linker) versions prior to the version included in Google Chrome 47.0.2526.73
Google Chrome versions prior to 47.0.2526.73
Description
The issue is related to the
FindStartOffsetOfFileInZipFile function in crazy linker zip.cpp, which improperly searches for an EOCD record. This allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.Recommendations
For crazy linker (aka Crazy Linker) versions prior to the version included in Google Chrome 47.0.2526.73, update to a version included in Google Chrome 47.0.2526.73 or later.
For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾