Seungmyung Lee

A buffer overflow exists in PDFium, a PDF rendering engine, within Google Chrome on Windows. A remote attacker could use social engineering to trick a user into opening a specially crafted PDF file, potentially leading to arbitrary code execution inside the sandbox.

A security issue exists that allows attackers to affect the system.

A cross-site request forgery (CSRF) issue exists in the 'cmd.cgi' endpoint. The CSRF protection mechanism fails to properly validate requests when the `NagFormId` cookie is missing. This allows an attacker to send a malicious cross-site POST request that executes arbitrary Nagios commands using the privileges of an authenticated user without their consent. CSRF is a type of attack that tricks a victim into submitting a malicious request.

A Cross-Site Request Forgery (CSRF) issue exists in the 'cmd.cgi' endpoint. When the Cookie header is missing, the double-submit cookie protection mechanism can be bypassed by providing identical values for the `NagFormId` and `nagFormId` variables within the POST body. This allows an attacker to execute Nagios commands using the privileges of a currently authenticated user.

A use after free issue exists in the PDF component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A header injection issue exists in the forward-auth plugin due to improper neutralization of CRLF sequences (Carriage Return Line Feed, a special sequence of characters used to mark the end of a line of text). A remote attacker can exploit this by sending specially crafted HTTP requests to inject malicious headers, potentially bypassing security mechanisms and gaining unauthorized access to protected information.