Seungmyung Lee

A buffer overflow exists in PDFium, a PDF rendering engine, within Google Chrome on Windows. A remote attacker could use social engineering to trick a user into opening a specially crafted PDF file, potentially leading to arbitrary code execution inside the sandbox.

A security issue exists that allows attackers to affect the system.

A cross-site request forgery (CSRF) issue exists in the 'cmd.cgi' endpoint. The CSRF protection mechanism fails to properly validate requests when the `NagFormId` cookie is missing. This allows an attacker to send a malicious cross-site POST request that executes arbitrary Nagios commands using the privileges of an authenticated user without their consent. CSRF is a type of attack that tricks a victim into submitting a malicious request.

A Cross-Site Request Forgery (CSRF) issue exists in the 'cmd.cgi' endpoint. When the Cookie header is missing, the double-submit cookie protection mechanism can be bypassed by providing identical values for the `NagFormId` and `nagFormId` variables within the POST body. This allows an attacker to execute Nagios commands using the privileges of a currently authenticated user.

A use after free issue exists in the PDF component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

توجد مشكلة في حقن الرؤوس في المكون الإضافي forward-auth بسبب التعطيل غير السليم لتسلسلات CRLF (Carriage Return Line Feed، وهي تسلسل خاص من الأحرف يُستخدم لتمييز نهاية سطر النص). يمكن للمهاجم عن بُعد استغلال هذه الثغرة عن طريق إرسال طلبات HTTP مصممة خصيصًا لحقن رؤوس ضارة، مما قد يؤدي إلى تجاوز آليات الأمان والحصول على وصول غير مصرح به إلى المعلومات المحمية.