PT-2018-2528 · Google+3 · Google Chrome+4

Publicado

2018-10-31

·

Atualizado

2024-06-15

·

CVE-2019-5762

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 72.0.3626.81
Description The issue is related to inappropriate memory management when caching in PDFium, which can allow a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. This is due to a buffer overflow error in the PDF content handler of PDFium in Google Chrome. The exploitation of this issue may enable a remote attacker to execute arbitrary code using a specially crafted PDF file.
Recommendations For Google Chrome versions prior to 72.0.3626.81, update to version 72.0.3626.81 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2019-1257
BDU:2019-00911
CVE-2019-5762
DSA-4395-1
DSA-4395-2
OPENSUSE-SU-2019:0204-1
OPENSUSE-SU-2019:0206-1
OPENSUSE-SU-2019:0216-1
OPENSUSE-SU-2019_0204-1
OPENSUSE-SU-2019_0205-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2019:0309
RHSA-2019_0309

Produtos afetados

Alt Linux
Google Chrome
Pdfium
Red Hat
Suse