CVE-2016-10403

Опубликовано: 09 янв. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 51.0.2704.63 (исключая)

EPSS

Процентиль: 57%

0.00794

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2016-10403

CVSS3: 8.8

ubuntu

почти 8 лет назад

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

CVE-2016-10403

CVSS3: 8.8

debian

почти 8 лет назад

Insufficient data validation on image data in PDFium in Google Chrome ...

GHSA-8973-9xqm-82q8

CVSS3: 8.8

github

больше 4 лет назад

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

ALT-PU-2016-2194

CVSS3: 9.8

altlinux

около 10 лет назад

ALT-PU-2016-2194: package `chromium` update to version 54.0.2840.59-alt2

EPSS

Процентиль: 57%

0.00794

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125