PT-2019-2912

CVE-2019-5868

·

Published

2019-08-06

·

Updated

2024-06-15

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 76.0.3809.100
Description The issue is related to a use after free in the PDFium component of Google Chrome, specifically in the ExecuteFieldAction handler for PDF content. This can lead to memory corruption. A remote attacker could potentially exploit this to cause a denial of service or execute arbitrary code by using a crafted PDF file.
Recommendations For versions prior to 76.0.3809.100, update to version 76.0.3809.100 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALT-PU-2019-2796
ALT-PU-2020-1050
ALT-PU-2020-1707
ALT-PU-2020-2441
DSA-4500-1
MGASA-2019-0283
OPENSUSE-SU-2019:1902-1
OPENSUSE-SU-2019_1902-1
OPENSUSE-SU-2019:1903-1
OPENSUSE-SU-2019_1903-1
OPENSUSE-SU-2019:1928-1
OPENSUSE-SU-2019:1931-1
OPENSUSE-SU-2019:2447-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾