PT-2015-1673 · Google+4 · Google Chrome+5

Publicado

2015-07-21

·

Atualizado

2024-06-15

·

CVE-2015-1271

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89
Description The issue is caused by a heap-based buffer overflow in the PDFium component due to improper handling of out-of-memory conditions. This can be exploited by remote attackers using a specially crafted PDF document, potentially leading to a denial of service or other unspecified impacts.
Recommendations For versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue. As a temporary workaround, consider restricting the use of PDF documents from untrusted sources to minimize the risk of exploitation.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2015-1729
BDU:2015-11019
CVE-2015-1271
DSA-3315-1
MGASA-2015-0288
OPENSUSE-SU-2015_1287-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:1499
RHSA-2015_1499

Produtos afetados

Alt Linux
Google Chrome
Opera
Pdfium
Red Hat
Suse