pdfium CPDF_DIBSource::DownSampleScanline32Bit - Heap Based Out-of-Bounds Read

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=625 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- $ ./pdfiumtest...

pdfium - CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=625 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- $ ./pdfiumtest asanheap-oobd08cef36998361562cacee739a7c6cb31eea735eb6 Rendering PDF file...

pdfium - CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=623 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- $ ./pdfiumtest asanheap-oobb4a7e07134a91748c99d169425fc39c76197d7cd74 Rendering PDF file...

pdfium IsFlagSet (v8 memory management) - SIGSEGV

Source: https://code.google.com/p/google-security-research/issues/detail?id=622 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- ==31710==ERROR: AddressSanitizer: SEGV on unknown address 0x7f53cc100009 pc 0x0000016fafe2 bp 0x7ffee170d730 sp...

pdfium - CPDF_TextObject::CalcPositionData Heap Out-of-Bounds Read

pdfium - CPDFTextObject::CalcPositionData Heap Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=623 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- $ ./pdfiumtest...

pdfium - CPDF_DIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read

pdfium - CPDFDIBSource::DownSampleScanline32Bit Heap Out-of-Bounds Read Source: https://code.google.com/p/google-security-research/issues/detail?id=625 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- $ ./pdfiumtest...

pdfium IsFlagSet (v8 memory management) - SIGSEGV

pdfium IsFlagSet v8 memory management - SIGSEGV Source: https://code.google.com/p/google-security-research/issues/detail?id=622 The following crash was encountered in pdfium the Chrome PDF renderer during PDF fuzzing: --- cut --- ==31710==ERROR: AddressSanitizer: SEGV on unknown address...

Google Chrome - Renderer Process to Browser Process Privilege Escalation

Google Chrome - Renderer Process to Browser Process Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=664 There is an overflow in the ui::PlatformCursor WebCursor::GetPlatformCursor method. In...

Google Chrome AppCache Memory Misreference Vulnerability (CNVD-2015-07956)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the AppCache implementation of Google Chrome prior to version 47.0.2526.73. A remote attacker can exploit this vulnerability to cause a denial of service with renderer...

CVE-2015-6766

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...

CVE-2015-6766

Removed by vendor...

CVE-2015-6766

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...

CVE-2015-6774

Removed by vendor...

CVE-2015-6766

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...

USN-2770-1 oxide-qt vulnerabilities

It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...

USN-2770-1: Oxide vulnerabilities

It was discovered that ContainerNode::parserInsertBefore in Blink would incorrectly proceed with a DOM tree insertion in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same origin restrictions. CVE-2015-67...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

Google Chrome Printing Memory Misreference Vulnerability

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the PrintWebViewHelper class in Google Chrome components/printing/renderer/printwebviewhelper.cc allows remote attackers to construct a malicious WEB page and trick the user into parsing it, which could crash the...

chromium-browser: Memory corruption in skia

SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data...

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-04884)

Google Chrome is a web browser developed by the American company Google Google. A cross-site scripting vulnerability exists in the 'V8ContextNativeHandler:: V8ContextNativeHandler:: GetModuleSystem' function in the extensions/renderer/v8contextnativehandler.cc file in Google Chrome versions prior...