UBUNTU-CVE-2017-5032

PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-5032

PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Design/Logic Flaw

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file...

Design/Logic Flaw

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

UBUNTU-CVE-2017-5034

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

UBUNTU-CVE-2017-5036

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file...

CVE-2017-5032

PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-5034

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2017-5036

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file...

CVE-2017-5034

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2017-5039

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-5036

CVE-2017-5036 is a use-after-free in the PDFium component of Chromium/Google Chrome. Affects desktop Chrome prior to 57.0.2987.98 and Android prior to 57.0.2987.108, exploitable via a crafted PDF file with the impact described as unspecified in the initial entry. Connected sources corroborate the...

CVE-2017-5039

Removed by vendor...

CVE-2017-5034

Removed by vendor...

CVE-2017-5036

Removed by vendor...

CVE-2017-5032

Removed by vendor...

PoDoFo Denial of Service Vulnerability (CNVD-2017-06111)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoDoFo version 0.9.5. A remote attacker can exploit this vulnerability to deny service infinite recursion and stack consumption via a crafted PDF file...

PoDoFo Denial of Service Vulnerability (CNVD-2017-05892)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoDoFo 0.9.5. A remote attacker can exploit this vulnerability to cause a denial of service infinite recursion and application crash via a crafted PDF document...

PoDoFo Denial of Service Vulnerability (CNVD-2017-05891)

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoEoFo version 0.9.5. A remote attacker could exploit this vulnerability to cause a denial of service NULL pointer dereference and application crash via a crafted PDF document...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted PDF document...