PT-2016-3021 · Google+4 · Google Chrome+5
Publicado
2016-12-01
·
Atualizado
2024-06-15
·
CVE-2016-5223
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux
Google Chrome version prior to 55.0.2883.84 for Android
Opera (affected versions not specified)
Description
The issue is caused by an integer overflow in the PDFium component, which can be exploited by a remote attacker using a crafted PDF file. This could potentially lead to heap corruption or denial of service. The exploitation of this issue may allow a remote attacker to execute arbitrary code.
Recommendations
For Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux, update to version 55.0.2883.75 or later.
For Google Chrome version prior to 55.0.2883.84 for Android, update to version 55.0.2883.84 or later.
For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Pdfium
Red Hat
Suse