PT-2018-3984 · Google · Google Chrome
CVE-2018-20072
·
Publicado
2018-12-22
·
Atualizado
2024-09-27
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 73.0.3683.75
Description
The issue is related to insufficient data validation in PDF files, which can allow a remote attacker to perform out of bounds memory access via a crafted PDF file. This can potentially lead to arbitrary code execution, denial of service, or disclosure of protected information. The exploitation occurs when a specially crafted PDF file is sent to the vulnerable system.
Recommendations
For versions prior to 73.0.3683.75, update to version 73.0.3683.75 or later to resolve the issue.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Google Chrome