PT-2023-1994 · Google+4 · Pdfium+5

Published 2023-03-21 · Updated 2024-11-29 · CVE-2023-1530

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 111.0.5563.110

Description The issue is related to a use after free vulnerability in the PDFium component of Google Chrome, which can be exploited by a remote attacker to potentially cause heap corruption via a specially crafted HTML page. This could allow the attacker to cause a denial of service or execute arbitrary code.

Recommendations For versions prior to 111.0.5563.110, update to version 111.0.5563.110 or later to resolve the issue. As a temporary workaround, consider restricting the use of PDFium in Google Chrome until a patch is applied.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2023-1659

ALT-PU-2023-1928

ALT-PU-2023-1998

ALT-PU-2023-2011

ALT-PU-2023-2021

ALT-PU-2023-4119

ALT-PU-2023-5790

ALT-PU-2024-14286

ALT-PU-2024-14830

BDU:2023-01617

CVE-2023-1530

DSA-5377-1

OPENSUSE-SU-2023:0082-1

OPENSUSE-SU-2023:0114-1

OPENSUSE-SU-2023:0115-1

OPENSUSE-SU-2023_0114-1

OPENSUSE-SU-2023_0115-1

OPENSUSE-SU-2024:12811-1

OPENSUSE-SU-2024:12948-1

OPENSUSE-SU-2024:12963-1

USN-6021-1

Affected Products

Alt Linux

Astra Linux

Google Chrome

Pdfium

Suse

Ubuntu

References · 2413

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudoedit_bypass_priv_esc.rb · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/n3m1sys/CVE-2023-22809-sudoedit-privesc · Exploit
• 🔥 https://github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-3079 · Exploit
• 🔥 https://github.com/bjrjk/CVE-2022-4262 · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-4262 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit