CVE-2014-7903

Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image...

CVE-2014-7900

CVE-2014-7900 affects PDFium’s CPDF_Parser::IsLinearizedFile used by Google Chrome before 39.0.2171.65. Root cause is a use-after-free in PDF parsing of linearized PDFs, enabling remote DoS or possible unspecified impact via a crafted document. Connected documents confirm Chrome/OpenChromium CVE-...

CVE-2014-7901

The CVE-2014-7901 entry is tied to OpenJPEG in PDFium, used by Google Chrome before 39.0.2171.65. The vulnerability is an integer overflow in opj_t2_read_packet_data within fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c when processing a long JPEG segment, which can allow remote attackers to cause a d...

CVE-2014-7902

CVE-2014-7902 is a use-after-free in PDFium used by Google Chrome prior to 39.0.2171.65, exploitable via a crafted PDF to cause a denial of service (and possibly unspecified other impact). OpenSUSE/SUSE advisories indicate upgrading Chrome to 39.0.2171.65 fixes this along with other CVEs (e.g., 7...

CVE-2014-7903

CVE-2014-7903 involves a buffer overflow in OpenJPEG prior to r2911 within PDFium, used by Google Chrome up to version 39.0.2171.65. An attacker can cause a denial of service or potentially other impact via a crafted JPEG image. The issue is tied to PDFium/OpenJPEG handling in Chrome before the s...

CVE-2014-7903

Removed by vendor...

CVE-2014-7902

Removed by vendor...

CVE-2014-7900

Removed by vendor...

CVE-2014-7902: Undefined Security Weakness

Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

CVE-2014-7901: Undefined Security Weakness

Integer overflow in the opjt2readpacketdata function in fxcodec/fxlibopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image...

CVE-2014-7903: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image...

CVE-2014-7900: Undefined Security Weakness

Use-after-free vulnerability in the CPDFParser::IsLinearizedFile function in fpdfapi/fpdfparser/fpdfparserparser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

PT-2014-8333

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 39.0.2171.65 Description The issue is related to a use-after-free vulnerability in PDFium, which is used in Google Chrome. This vulnerability can be exploited by remote attackers using a crafted PDF document,...

PT-2014-8331

Name of the Vulnerable Software and Affected Versions PDFium versions prior to 39.0.2171.65 Google Chrome versions prior to 39.0.2171.65 Description The issue is related to a use-after-free vulnerability in the CPDF Parser::IsLinearizedFile function. This vulnerability can be triggered by a craft...

openSUSE Security Update : chromium (openSUSE-SU-2014:1378-1)

Update to Chromium 38.0.2125.101 This update includes 159 security fixes, including 113 relatively minor fixes. Highlighted securtiy fixes are: CVE-2014-3188: A combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox CVE-2014-3189: Out-of-bounds read in PDFium...

Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 38.0.2125.104 Multiple Vulnerabilities

Binary data 8551.pasl...

chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101

The chromepdf::CopyImage function in pdf/drawutils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via unknown...

chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified...