Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Qazbnm456

#54653de 56,330
4.3CVSS total
Vulnerabilidades · 1
PT-2018-5199
4.3
2018-01-02
Google · Pdfium · CVE-2017-1000424
**Name of the Vulnerable Software and Affected Versions** Electron versions 1.6.4 through 1.6.11 Electron versions 1.7.0 through 1.7.5 **Description** The issue allows for a URL Spoofing problem when opening PDFs in PDFium, resulting in the loading of arbitrary PDFs that a hacker can control. **Recommendations** For Electron versions 1.6.4 through 1.6.11, update to a version outside of this range to resolve the issue. For Electron versions 1.7.0 through 1.7.5, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of PDFium for opening PDFs until a patch is available.