PT-2018-3405 · Google+3 · Google Chrome+4
Publicado
2018-12-14
·
Atualizado
2024-06-15
·
CVE-2019-5792
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 73.0.3683.75
Description:
The issue is related to an integer overflow in the PDFium component of Google Chrome, which can be exploited by a remote attacker using a crafted PDF file. This could potentially allow the attacker to perform out of bounds memory access. The exploitation of this issue may also enable the attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations:
For versions prior to 73.0.3683.75, update to version 73.0.3683.75 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.
Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Pdfium
Red Hat
Suse