PT-2020-5037

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.75 Description The issue is related to uninitialized data in PDFium, a component of Google Chrome, which can allow a remote attacker to obtain potentially sensitive information from process memory. Thi...

The vulnerability of the PDFium web browser’s PDF-content handler allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium browser for processing PDF content in Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures through...

PT-2019-4425

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.87 Description The issue is related to a use after free vulnerability in the PDFium PDF content handler. This allows a remote attacker to potentially exploit heap corruption via a specially crafted HTM...

PT-2019-3420

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to a use-after-free error in the PDFium PDF content handler, which can lead to heap corruption. This can be exploited by a remote attacker using a specially crafted...

Security Bulletin: varying error codes allows detection of existing systems behind firewall

Summary A security vulnerability related to content handler URLs makes it possible to check if a system exists for example, behind a firewall. A different error code is returned for a systems that exist but are not accessible via the proxy functionality versus b systems that do not exist. Affecte...

MediaWiki cross-site scripting vulnerability (CNVD-2015-00070)

MediaWiki is a Wiki program that runs on a PHP+MySQL environment. A cross-site scripting vulnerability exists in MediaWiki versions prior to 1.19.22, 1.22.x prior to 1.22.14, and 1.23.x prior to 1.23.7 when $ wgContentHandlerUseDB is enabled. Allows remote attackers to conduct cross-site scriptin...