CVE-2014-7903

CVE-2014-7903 involves a buffer overflow in OpenJPEG prior to r2911 within PDFium, used by Google Chrome up to version 39.0.2171.65. An attacker can cause a denial of service or potentially other impact via a crafted JPEG image. The issue is tied to PDFium/OpenJPEG handling in Chrome before the s...

CVE-2014-7902

CVE-2014-7902 is a use-after-free in PDFium used by Google Chrome prior to 39.0.2171.65, exploitable via a crafted PDF to cause a denial of service (and possibly unspecified other impact). OpenSUSE/SUSE advisories indicate upgrading Chrome to 39.0.2171.65 fixes this along with other CVEs (e.g., 7...

CVE-2014-7900

Removed by vendor...

CVE-2014-7901: Undefined Security Weakness

Integer overflow in the opjt2readpacketdata function in fxcodec/fxlibopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image...

CVE-2014-7903: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image...

CVE-2014-7902: Undefined Security Weakness

Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

CVE-2014-7900: Undefined Security Weakness

Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

openSUSE Security Update : chromium (openSUSE-SU-2014:1378-1)

Update to Chromium 38.0.2125.101 This update includes 159 security fixes, including 113 relatively minor fixes. Highlighted securtiy fixes are: CVE-2014-3188: A combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox CVE-2014-3189: Out-of-bounds read in PDFium...

Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 38.0.2125.104 Multiple Vulnerabilities

Binary data 8551.pasl...

chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

Google Fixes 159 Flaws in Chrome

Google updates its Chrome browser on a very aggressive timeline, often a couple of times a month. Usually, each update includes a handful of security fixes, maybe 12 or 15. On Tuesday, the company released Chrome 38, which patched a staggering 159 vulnerabilities. The huge majority of those...

FreeBSD : chromium -- multiple vulnerabilities (d2bbcc01-4ec3-11e4-ab3f-00262d5ed8ee)

Google Chrome Releases reports : 159 security fixes in this release, including 113 found using MemorySanitizer : - 416449 Critical CVE-2014-3188: A special thanks to Juri Aedla for a combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox. - 398384 High...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

UBUNTU-CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

UBUNTU-CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...