CVE-2016-1685

MEDIUM · 6.5 CVSS Gepubliceerd: 06-06-2016 CWE-119

Beschrijving

core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

Vendors

Google Debian Opensuse Redhat Suse

Affected products

Chrome Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org