CVE-2018-6072

Опубликовано: 06 мар. 2018

Источник: redhat

CVSS3: 6.5

EPSS Низкий

Описание

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=1552489chromium-browser: integer overflow in pdfium

EPSS

Процентиль: 76%

0.00936

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2018-6072

CVSS3: 8.8

ubuntu

около 7 лет назад

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVE-2018-6072

CVSS3: 8.8

nvd

около 7 лет назад

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVE-2018-6072

CVSS3: 8.8

debian

около 7 лет назад

An integer overflow leading to use after free in PDFium in Google Chro ...

GHSA-gqvm-7mf4-cx8m

CVSS3: 8.8

github

больше 3 лет назад

An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

openSUSE-SU-2018:0704-1

suse-cvrf

почти 8 лет назад

Security update for Chromium

EPSS

Процентиль: 76%

0.00936

Низкий

6.5 Medium

CVSS3