CVE-2016-5184

CVE-2016-5184

EPSS 1.1%

PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.

Produtos afetados

n/a · Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://rhn.redhat.com/errata/RHSA-2016-2067.html https://chromereleases.googleblog.com/2016/10/stable-channel-update-for-desktop.html https://crbug.com/630654 https://security.gentoo.org/glsa/201610-09 http://www.securityfocus.com/bid/93528