CVE-2017-1000424

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

CVE-2017-1000424

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

CVE-2017-1000424

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

PT-2018-5199

Name of the Vulnerable Software and Affected Versions Electron versions 1.6.4 through 1.6.11 Electron versions 1.7.0 through 1.7.5 Description The issue allows for a URL Spoofing problem when opening PDFs in PDFium, resulting in the loading of arbitrary PDFs that a hacker can control...

CVE-2017-1000424: Undefined Security Weakness

Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs that a hacker can control...

The vulnerability of PDFium, the component responsible for rendering PDF documents in Google Chrome browsers, allows attackers to perform memory-reading operations beyond the limits of the application’s memory.

The vulnerability of PDFium, which is responsible for rendering PDF documents in Google Chrome browsers, is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to perform reading operations beyond the memory limit of the application, using a specially crafted...

openSUSE Security Update : chromium (openSUSE-2017-1349)

This update to Chromium 63.0.3239.84 fixes the following security issues : - CVE-2017-15408: Heap buffer overflow in PDFium - CVE-2017-15409: Out of bounds write in Skia - CVE-2017-15410: Use after free in PDFium - CVE-2017-15411: Use after free in PDFium - CVE-2017-15412: Use after free in libXM...

[ASA-201712-6] qt5-webengine: multiple issues

Arch Linux Security Advisory ASA-201712-6 ========================================= Severity: Critical Date : 2017-12-13 CVE-ID : CVE-2017-15386 CVE-2017-15387 CVE-2017-15388 CVE-2017-15390 CVE-2017-15392 CVE-2017-15394 CVE-2017-5124 CVE-2017-5126 CVE-2017-5127 CVE-2017-5128 CVE-2017-5129...

Debian DSA-4064-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2017-15407 Ned Williamson discovered an out-of-bounds write issue. - CVE-2017-15408 Ke Liu discovered a heap overflow issue in the pdfium library. - CVE-2017-15409 An out-of-bounds write issue was discovered in the sk...

Security update for chromium (important)

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

OPENSUSE-SU-2017:3245-1 Security update for chromium

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

chromium-browser: heap buffer overflow in pdfium

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium...

chromium-browser: use after free in pdfium

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

chromium-browser: use after free in pdfium

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15410

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2017-14058

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. This is due to a use after free in PDFium...

PT-2017-14056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description A heap buffer overflow issue in the Omnibox component of Google Chrome and Opera, related to the handling of PDF files by PDFium, allows a remote...

PT-2017-14059

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. This is due to a use after free in PDFium...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 63 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 63.0.3239.84 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...