chromium-browser: use after free in pdfium

Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Google Chrome PDFium jpeg2000 SIZ Code Execution Vulnerability(CVE-2016-1681)

SUMMARY An exploitable heap buffer overflow vulnerability exists in the Pdfium PDF reader included in the Google Chrome web browser. A specially crafted PDF document with embedded jpeg2000 image can cause a heap buffer overflow potentially resulting in an arbitrary code execution. An attacker can...

Vulnerability Spotlight: Google PDFium Tiff Code Execution

OverviewTalos is disclosing a single off-by-one read/write vulnerability found in the TIFF image decoder functionality of PDFium as used in Google Chrome up to and including version 60.0.3112.101. Google Chrome is the most widely used web browser today and a specially crafted PDF could trigger th...

Google PDFium TIFF Image Flate Decoder Code Execution Vulnerability

Summary An off-by-one read/write on the heap vulnerability exists in the TIFF image decoder functionality of Pdfium as used by Google Chrome up to and including 60.0.3112.101. A specially crafted PDF file can trigger an off-by-one read and write on the heap resulting in memory corruption and a...

Double free

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

UBUNTU-CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

DEBIAN-CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2015-1239

CVE-2015-1239 is a vulnerability in OpenJPEG (used by PDFium in Google Chrome) where a double free in j2k_read_ppm_v3 can cause a remote-denial of service (process crash) via a crafted PDF. Affected software is OpenJPEG prior to r2997; impact is crash/DoS with no confidentiality or integrity loss...

CVE-2015-1239

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

CVE-2017-5126

A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-5127

Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2017-6480 · Google +2 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions before r2997 PDFium in Google Chrome affected versions not specified Description: The issue is related to a double free vulnerability in the j2k read ppm v3 function. This vulnerability allows remote attackers to cause a...

CVE-2015-1239: Double Free

Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service process crash via a crafted PDF...

PT-2017-16325

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera versions prior to 62.0.3202.62 Description A use after free in PDFium allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Recommendations For Google Chrome...

PT-2017-16326

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera affected versions not specified Description The issue is related to a use after free in PDFium, which could allow a remote attacker to potentially exploit heap corruption via a crafted PDF fil...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 35 security fixes in this release, including: 762930 High CVE-2017-5124: UXSS with MHTML. Reported by Anonymous on 2017-09-07 749147 High CVE-2017-5125: Heap overflow in Skia. Reported by Anonymous on 2017-07-26 760455 High CVE-2017-5126: Use after free in PDFium...