CVE-2015-6792

Critical

Published: 24/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The MIDI subsystem in Google Chrome before version 47.0.2526.106 does not properly handle the sending of data, allowing remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Risk Assessment

Attackers may exploit this vulnerability to gain control over the system or disrupt application functionality, potentially leading to serious consequences for the organization.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.