2277 matches found
Design/Logic Flaw
PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...
UBUNTU-CVE-2015-6779
PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...
UBUNTU-CVE-2015-6776
The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...
Out-of-bounds
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
CVE-2015-6779
PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...
UBUNTU-CVE-2015-6778
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
UBUNTU-CVE-2015-6775
fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...
CVE-2015-6778
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
Type confusion
fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...
CVE-2015-6775
fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...
CVE-2015-6778
CVE-2015-6778 affects PDFium in Chrome before 47.0.2526.73. The vulnerability is an out-of-bounds read in CJBig2_SymbolDict.cpp (JBIG2 data in PDFs) that could allow a remote attacker to cause a denial of service or other impact via crafted JBIG2 data. Public references corroborate the flaw in PD...
CVE-2015-6778
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
CVE-2015-6779
CVE-2015-6779 : In PDFium used by Google Chrome prior to 47.0.2526.73, the library fails to properly restrict chrome: URLs, allowing a crafted PDF to bypass scheme restrictions via a link to chrome://settings. This could enable remote exploitation within affected Chrome/Chromium environments. The...
CVE-2015-6775
fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...
CVE-2015-6775
Removed by vendor...
CVE-2015-6776
The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...
CVE-2015-6776
CVE-2015-6776 affects OpenJPEG (opj_dwt_decode_1* in dwt.c) as used by PDFium in Google Chrome prior to 47.0.2526.73, allowing remote attackers to trigger a denial of service via crafted JPEG 2000 data. The Debian and Gentoo entries confirm Chrome/Chromium exposure and Python fix guidance: upgrad...
CVE-2015-6775
PDFium in Google Chrome prior to 47.0.2526.73 is affected by CVE-2015-6775 due to a type confusion in fpdfsdk/src/jsapi/fxjs_v8.cpp. This vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impacts via crafted vectors. The issue is tied to how...