PT-2018-17343

CVE-2018-6072

Published

2018-03-06

Updated

2024-06-15

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146

Description The issue is related to an integer overflow leading to use after free in PDFium, which can potentially allow a remote attacker to exploit heap corruption via a crafted PDF file.

Recommendations For Google Chrome versions prior to 65.0.3325.146, update to version 65.0.3325.146 or later. For Opera versions prior to 65.0.3325.146, update to a version that includes the fix for this issue, as the exact version is not specified.

Exploitability

Exploit

Fix

Impacts

Researchers

Atte Kettunen

Vendors