Google Chrome PDFium memory misreference vulnerability (CNVD-2017-04436)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application or execute arbitra...

Debian Security Advisory DSA 3810-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2017-5029 Holger Fuhrmannek discovered an integer overflow issue in the libxslt library. CVE-2017-5030 Brendon Tiszka discovered a memory corruption issue in the v8 javascript library. CVE-2017-5031 Looben Yang discover...

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

chromium-browser: out of bounds write in pdfium

PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

Google Chrome memory misreference vulnerability (CNVD-2017-03345)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome PDFium, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by the user, which can crash the application or execute arbitra...

[ASA-201703-4] chromium: multiple issues

Arch Linux Security Advisory ASA-201703-4 ========================================= Severity: Critical Date : 2017-03-11 CVE-ID : CVE-2017-5029 CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5033 CVE-2017-5034 CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5038 CVE-2017-5039 CVE-2017-5040...

Google Chrome 57 Browser Update Patches 'High' Severity Flaws

Google released an updated version of its Chrome browser on Thursday to fix nine high-severity vulnerabilities that if exploited could allow adversaries to take control of targeted systems. As part of the update, Google thanked nearly two dozen bug hunters with bug bounty payments totaling $38,00...

CVE-2017-5039

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2017-5036

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file...

CVE-2017-5032

PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

PT-2017-16269

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Opera versions prior to 57.0.2987.98 affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted PDF file by incrementing off...

PT-2017-16273

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 for Mac, Windows, and Linux Google Chrome version 57.0.2987.108 for Android Opera affected versions not specified Description A use after free in PDFium allowed a remote attacker to have an...

PT-2017-16276

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 for Mac, Windows, and Linux Google Chrome version 57.0.2987.108 for Android Opera affected versions not specified Description A use after free in PDFium allowed a remote attacker to potentially...

PT-2017-16271

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Opera versions prior to 57.0.2987.98 Description A use after free in PDFium allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Recommendations For Google Chrom...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 57 to the stable channel - 57.0.2987.98 for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 57.0.2987.98 contains a number of fixes and improvements -- a list of changes is available in the log. Watch o...

The vulnerability of Google Chrome browser allows a perpetrator to gain access to protected information.

The vulnerability of the PDFium component in the Google Chrome browser is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created PDF file...

The vulnerability of Google Chrome browser allows a perpetrator to gain access to protected information.

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a specially created PDF file...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the PDFium component in the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially created PDF file...

The vulnerability of Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser is caused by numerical overflow or cyclic shift. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created PDF file, from a remote location...