CVE ID:	CVE-2015-1258
Description:	Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.
Test IDs:	1.3.6.1.4.1.25623.1.0.130127   1.3.6.1.4.1.25623.1.0.869961   1.3.6.1.4.1.25623.1.0.703267   1.3.6.1.4.1.25623.1.0.869991
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1258 BugTraq ID: 74723 http://www.securityfocus.com/bid/74723 Debian Security Information: DSA-3267 (Google Search) http://www.debian.org/security/2015/dsa-3267 http://lists.fedoraproject.org/pipermail/package-announce/2015-September/166975.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168803.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167428.html https://security.gentoo.org/glsa/201506-04 http://www.securitytracker.com/id/1032375 SuSE Security Announcement: openSUSE-SU-2015:0969 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-05/msg00091.html SuSE Security Announcement: openSUSE-SU-2015:1877 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00015.html