Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data. Affected function is opjtcdinittile in the file tcd.c...

Denial Of Service (DoS)

OpenJPEG is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable PDFium component to cause denial of service conditions via crafted JPEG 2000 data that is mishandled during opjalignedmalloc calls in dwt.c and t1.c...

Google Chrome PDFium Input Validation Error Vulnerability (CNVD-2019-23111)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. An input validation error vulnerability exists in PDFium in versions prior to Google Chrome 74.0.3729.108, which arises from a network system or product that does not...

Google Chrome Security Updates (stable-channel-update-for-desktop_23-2019-04) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome PDFium Input Validation Error Vulnerability (CNVD-2019-23116)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. An input validation error vulnerability exists in PDFium in versions prior to Google Chrome 74.0.3729.108, which arises from a network system or product that does not...

CVE-2019-5821

Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5820

Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5805

Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 74 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 74.0.3729.108 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

The vulnerability of the PDFium rendering mechanism in Google Chrome browsers, related to memory usage after deallocation, allows attackers to compromise the integrity of the protected information.

The vulnerability of the PDFium rendering mechanism in the Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to compromise the integrity of protected information by using a specially created PDF file...

RHEL 6 : chromium-browser (RHSA-2019:0708)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0708 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 73.0.3683.75. Security Fixes:...

chromium-browser: Integer overflow in PDFium

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

chromium-browser: Integer overflow in PDFium

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

openSUSE Security Update : Chromium (openSUSE-2019-977)

This update to Chromium version 71.0.3578.80 fixes security issues and bugs. Security issues fixed boo1118529 : - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium -...

openSUSE Security Update : Chromium (openSUSE-2019-1006)

This update to Chromium 71.0.3578.98 fixes on security issue. - CVE-2018-17481: Use after free in PDFium - a follow-up fix to Chromiun 70 boo1119364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : Chromium (openSUSE-2019-548)

This update for Chromium to version 67.0.3396.99 fixes multiple issues. Security issues fixed bsc1095163 : - CVE-2018-6123: Use after free in Blink - CVE-2018-6124: Type confusion in Blink - CVE-2018-6125: Overly permissive policy in WebUSB - CVE-2018-6126: Heap buffer overflow in Skia -...

OPENSUSE-SU-2019:0204-1 Security update for chromium

This update for Chromium to version 72.0.3626.96 fixes the following issues: Security issues fixed bsc1123641 and bsc1124936: - CVE-2019-5784: Inappropriate implementation in V8 - CVE-2019-5754: Inappropriate implementation in QUIC Networking. - CVE-2019-5782: Inappropriate implementation in V8. ...

Google Chrome < 73.0.3683.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 73.0.3683.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201903stable-channel-update-for-desktop12 advisory. - Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a...

CVE-2019-5792

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

Google Chrome integer overflow vulnerability (CNVD-2019-23138)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in PDFium in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to potentially perform out-of-bounds memory access via a crafted PDF file...