CVE-2015-8479

Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
ChromeCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
VendorProductVersion
googlechrome
𝑥
≤ 46.0.2490.86
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
wily
Fixed 47.0.2526.73-0ubuntu0.15.10.1.1215
released
vivid
Fixed 47.0.2526.73-0ubuntu0.15.04.1.1190
released
trusty
Fixed 47.0.2526.73-0ubuntu0.14.04.1.1106
released
precise
ignored
oxide-qt
wily
Fixed 1.11.3-0ubuntu0.15.10.1
released
vivid
Fixed 1.11.3-0ubuntu0.15.04.1
released
trusty
Fixed 1.11.3-0ubuntu0.14.04.1
released
precise
dne