CVE-2015-6779

CVE-2015-6779 : In PDFium used by Google Chrome prior to 47.0.2526.73, the library fails to properly restrict chrome: URLs, allowing a crafted PDF to bypass scheme restrictions via a link to chrome://settings. This could enable remote exploitation within affected Chrome/Chromium environments. The...

CVE-2015-6776

CVE-2015-6776 affects OpenJPEG (opj_dwt_decode_1* in dwt.c) as used by PDFium in Google Chrome prior to 47.0.2526.73, allowing remote attackers to trigger a denial of service via crafted JPEG 2000 data. The Debian and Gentoo entries confirm Chrome/Chromium exposure and Python fix guidance: upgrad...

CVE-2015-6778

Removed by vendor...

CVE-2015-6776

Removed by vendor...

CVE-2015-6779

Removed by vendor...

CVE-2015-6775

Removed by vendor...

CVE-2015-6776

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

CVE-2015-6775

fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2015-6778

The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...

CVE-2015-6775

PDFium in Google Chrome prior to 47.0.2526.73 is affected by CVE-2015-6775 due to a type confusion in fpdfsdk/src/jsapi/fxjs_v8.cpp. This vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impacts via crafted vectors. The issue is tied to how...

CVE-2015-6775: Undefined Security Weakness

fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

CVE-2015-6776: Improper Restriction of Operations within the Bounds of a Memory Buffer

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

CVE-2015-6778: Improper Restriction of Operations within the Bounds of a Memory Buffer

The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...

CVE-2015-6779: Undefined Security Weakness

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

chromium-browser: Out of bounds access in PDFium

The opjdwtdecode1 functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavele...

chromium-browser: Out of bounds access in PDFium

The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...

chromium-browser: Type confusion in PDFium

fpdfsdk/src/jsapi/fxjsv8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."...

chromium-browser: Scheme bypass in PDFium

PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL...

FreeBSD : chromium -- multiple vulnerabilities (548f74bd-993c-11e5-956b-00262d5ed8ee)

Google Chrome Releases reports : 41 security fixes in this release, including : - 558589 Critical CVE-2015-6765: Use-after-free in AppCache. Credit to anonymous. - 551044 High CVE-2015-6766: Use-after-free in AppCache. Credit to anonymous. - 554908 High CVE-2015-6767: Use-after-free in AppCache...

PT-2015-7350

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 47.0.2526.73 Google Chrome versions prior to 47.0.2526.73 Opera versions prior to 47.0.2526.73 Description The issue allows remote attackers to cause a denial of service or possibly have other impact via crafted JPEG...