PT-2016-3049 · Google+4 · Google Chrome+5
Publicado
2016-12-01
·
Atualizado
2024-06-15
·
CVE-2016-5203
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux
Google Chrome version prior to 55.0.2883.84 for Android
Description
A use after free in PDFium allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. This issue is related to the use of memory after it has been freed, which can lead to information disclosure when a specially crafted PDF file is used.
Recommendations
For Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux, update to version 55.0.2883.75 or later.
For Google Chrome version prior to 55.0.2883.84 for Android, update to version 55.0.2883.84 or later.
Correção
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Opera
Pdfium
Red Hat
Suse