PT-2019-2912
CVE-2019-5868
·
تاريخ النشر
2019-08-06
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 76.0.3809.100
Description
The issue is related to a use after free in the PDFium component of Google Chrome, specifically in the ExecuteFieldAction handler for PDF content. This can lead to memory corruption. A remote attacker could potentially exploit this to cause a denial of service or execute arbitrary code by using a crafted PDF file.
Recommendations
For versions prior to 76.0.3809.100, update to version 76.0.3809.100 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾