PT-2016-2152 · Google+4 · Google Chrome+5

Ke Liu

·

Publicado

2016-05-25

·

Atualizado

2024-06-15

·

CVE-2016-1686

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PDFium versions prior to 51.0.2704.63 Google Chrome versions prior to 51.0.2704.63
Description The issue is related to the CPDF DIBSource::CreateDecoder function in PDFium, which mishandles decoder-initialization failure. This allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.
Recommendations For PDFium versions prior to 51.0.2704.63, update to version 51.0.2704.63 or later. For Google Chrome versions prior to 51.0.2704.63, update to version 51.0.2704.63 or later. As a temporary workaround, consider disabling the CPDF DIBSource::CreateDecoder function until a patch is available.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2016-2194
BDU:2016-01505
CVE-2016-1686
DSA-3590-1
MGASA-2016-0214
OPENSUSE-SU-2016_1430-1
OPENSUSE-SU-2016_1496-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2016:1190
RHSA-2016_1190

Produtos afetados

Alt Linux
Google Chrome
Opera
Pdfium
Red Hat
Suse