PT-2014-8331 · Google+2 · Google Chrome+3

Published 2014-11-18 · Updated 2024-06-15 · CVE-2014-7900

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PDFium versions prior to 39.0.2171.65 Google Chrome versions prior to 39.0.2171.65

Description The issue is related to a use-after-free vulnerability in the CPDF Parser::IsLinearizedFile function. This vulnerability can be triggered by a crafted PDF document, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts.

Recommendations For PDFium versions prior to 39.0.2171.65, update to version 39.0.2171.65 or later. For Google Chrome versions prior to 39.0.2171.65, update to version 39.0.2171.65 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2014-2430

CVE-2014-7900

OPENSUSE-SU-2014_1626-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Google Chrome

Pdfium

Suse

References · 2387

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7908 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-7900 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7907 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-7900 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7901 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7902 · Security Note
• https://ubuntu.com/security/CVE-2014-7900 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7904 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7899 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7906 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-7900 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7905 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory