PT-2014-8331 · Google+2 · Google Chrome+3

Publicado 2014-11-18 · Atualizado 2024-06-15 · CVE-2014-7900

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PDFium versions prior to 39.0.2171.65 Google Chrome versions prior to 39.0.2171.65

Description The issue is related to a use-after-free vulnerability in the CPDF Parser::IsLinearizedFile function. This vulnerability can be triggered by a crafted PDF document, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts.

Recommendations For PDFium versions prior to 39.0.2171.65, update to version 39.0.2171.65 or later. For Google Chrome versions prior to 39.0.2171.65, update to version 39.0.2171.65 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

ALT-PU-2014-2430

CVE-2014-7900

OPENSUSE-SU-2014_1626-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Produtos afetados

Alt Linux

Google Chrome

Pdfium

Suse

Referências · 2387

• https://suse.com/security/cve/CVE-2020-15974 · Nota
• https://suse.com/security/cve/CVE-2019-13742 · Nota
• https://suse.com/security/cve/CVE-2018-6106 · Nota
• https://suse.com/security/cve/CVE-2019-5799 · Nota
• https://suse.com/security/cve/CVE-2022-1497 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2015-1293 · Nota
• https://suse.com/security/cve/CVE-2019-5801 · Nota
• https://suse.com/security/cve/CVE-2013-0899 · Nota
• https://suse.com/security/cve/CVE-2020-6397 · Nota
• https://suse.com/security/cve/CVE-2022-3449 · Nota
• https://suse.com/security/cve/CVE-2012-2815 · Nota
• https://suse.com/security/cve/CVE-2021-30564 · Nota
• https://suse.com/security/cve/CVE-2023-0927 · Nota
• https://suse.com/security/cve/CVE-2022-3038 · Nota