CVE-2015-6783: Input Validation
Published Dec 6, 2015
·Updated
The FindStartOffsetOfFileInZipFile function in crazylinkerzip.cpp in crazylinker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.
Affected Software
3 affected components
Google Android=5.0
Google Android=6.0
Google Chrome<=46.0.2490.86
Event History
Dec 6, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description