PT-2018-3264 · Google+3 · Google Chrome+4

Publicado 2018-07-24 · Atualizado 2024-06-15 · CVE-2018-6170

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75

Description The issue is related to a bad cast in PDFium, which can lead to heap corruption. A remote attacker can potentially exploit this by using a crafted PDF file, allowing for the execution of arbitrary code.

Recommendations For versions prior to 68.0.3440.75, update to version 68.0.3440.75 or later to resolve the issue.

Exploit

Correção

Memory Corruption

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-787

CWE-704

Identificadores relacionados

ALT-PU-2018-2278

BDU:2019-04460

CVE-2018-6170

DSA-4256-1

MGASA-2018-0343

OPENSUSE-SU-2018_2134-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2018:2282

RHSA-2018_2282

Produtos afetados

Alt Linux

Google Chrome

Pdfium

Red Hat

Suse

Referências · 2335

• 🔥 https://crbug.com/862059 · Exploit
• https://suse.com/security/cve/CVE-2021-21192 · Nota
• https://suse.com/security/cve/CVE-2023-0129 · Nota
• https://suse.com/security/cve/CVE-2022-3044 · Nota
• https://suse.com/security/cve/CVE-2018-6089 · Nota
• https://suse.com/security/cve/CVE-2022-1872 · Nota
• https://suse.com/security/cve/CVE-2015-1294 · Nota
• https://suse.com/security/cve/CVE-2019-5831 · Nota
• https://suse.com/security/cve/CVE-2011-3051 · Nota
• https://suse.com/security/cve/CVE-2021-21187 · Nota
• https://suse.com/security/cve/CVE-2021-21142 · Nota
• https://suse.com/security/cve/CVE-2013-0893 · Nota
• https://suse.com/security/cve/CVE-2017-5024 · Nota
• https://suse.com/security/cve/CVE-2022-3304 · Nota
• https://suse.com/security/cve/CVE-2016-5188 · Nota