Description
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | chromium-browser | 47.0.2526.106-0ubuntu0.14.04.1.1107 | — |
| Ubuntu 14.04 LTS | oxide-qt | 1.11.4-0ubuntu0.14.04.1 | USN-2860-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | chromium-browser | 47.0.2526.106-1.el6 | RHSA-2015:2665 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Google Chrome - Renderer Process to Browser Process Privilege Escalation EDB-39039 · dos · Dec 18, 2015 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- RHSA-2015:2665 Red Hat Security Advisory: chromium-browser security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-2860-1 oxide-qt vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
References
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html
- 1034491 vdb-entry
- https://code.google.com/p/chromium/issues/detail?id=569486
- https://code.google.com/p/chromium/issues/detail?id=565023
- https://codereview.chromium.org/1498903003
- USN-2860-1 vendor-advisory
- 79686 vdb-entry