2600 matches found
CVE-2018-6144
Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...
CVE-2018-6170
Removed by vendor...
CVE-2018-17461
Removed by vendor...
CVE-2016-10403
Removed by vendor...
CVE-2018-20065
Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file...
CVE-2018-16076
Removed by vendor...
CVE-2018-17461
An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...
CVE-2016-10403
CVE-2016-10403 affects Google Chrome's PDFium component in the browser before version 51.0.2704.63, where insufficient data validation on image data can allow a remote attacker to cause an out-of-bounds memory read by a specially crafted PDF file. Documents corroborate a memory-read impact (confi...
CVE-2018-6120
Removed by vendor...
CVE-2018-17461
CVE-2018-17461 affects Google Chrome via PDFium. An out-of-bounds read in PDF rendering could be triggered by a crafted PDF file, allowing a remote attacker to read memory. Affected: Google Chrome prior to 68.0.3440.75 (PDFium component). Impact per CVSS3: High (partial confidentiality/integrity/...
CVE-2018-19478
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...
Design/Logic Flaw
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...
CVE-2018-19478
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file...
PT-2018-3697 · Poppler +4 · Poppler +4
Name of the Vulnerable Software and Affected Versions: Poppler version 0.72.0 Description: The issue is related to the PDFDoc::setup function in the PDFDoc.cc component of the Poppler library, which is used for displaying PDF files. It allows attackers to cause a denial-of-service, resulting in a...
Google Chrome < 71.0.3578.98 Vulnerability
The version of Google Chrome installed on the remote Windows host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...
Google Chrome < 71.0.3578.98 Vulnerability
The version of Google Chrome installed on the remote macOS host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...
CVE-2018-17481
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...
CVE-2018-18336
Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...