CVE-2014-3189

Removed by vendor...

CVE-2014-3198

Removed by vendor...

CVE-2014-3198

CVE-2014-3198 affects Google Chrome (PDFium in the Chromium PDF viewer). The issue arises in Instance::HandleInputEvent in pdf/instance.cc where a value of -1 is misinterpreted as an index instead of a no-visible-page error, enabling a remote attacker to perform an out-of-bounds read and cause a ...

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-3189

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

CVE-2014-3189

CVE-2014-3189 affects Google Chrome (Chromium) before 38.0.2125.101. The vulnerability is in the PDFium component, specifically in the function chrome_pdf::CopyImage in pdf/draw_utils.cc, which does not properly validate image-data dimensions. This can enable a remote attacker to trigger an out-o...

CVE-2014-3198: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...

CVE-2014-3189: Undefined Security Weakness

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 38 to the stable channel for Windows, Mac and Linux. Chrome 38.0.2125.101 contains a number of fixes and improvements, including: - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance A...

Google Chrome < 38.0.2125.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is a version prior to 37.0.2062.94. It is, therefore, affected by the following vulnerabilities : - A flaw exists in V8 and IPC that can lead to remote code execution. CVE-2014-3188 - Out-of-bounds read errors exist in PDFium. CVE-2014-318...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 159 security fixes in this release, including 113 found using MemorySanitizer: 416449 Critical CVE-2014-3188: A special thanks to Jüri Aedla for a combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox. 398384 High...