PT-2019-3431 · Google+3 · Google Chrome+4
Pdknsk
·
Publicado
2019-04-23
·
Atualizado
2024-06-15
·
CVE-2019-5820
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 74.0.3729.108
Description
The issue is related to an integer overflow in the PDFium PDF content handler, which can lead to heap corruption. This can be exploited by a remote attacker using a specially crafted PDF file, potentially allowing them to compromise data integrity, gain unauthorized access to protected information, and cause a denial of service.
Recommendations
For versions prior to 74.0.3729.108, update to version 74.0.3729.108 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.
Exploit
Correção
Memory Corruption
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Pdfium
Red Hat
Suse