PT-2019-2912
CVE-2019-5868
·
Published
2019-08-06
·
Updated
2024-06-15
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 76.0.3809.100
Description
The issue is related to a use after free in the PDFium component of Google Chrome, specifically in the ExecuteFieldAction handler for PDF content. This can lead to memory corruption. A remote attacker could potentially exploit this to cause a denial of service or execute arbitrary code by using a crafted PDF file.
Recommendations
For versions prior to 76.0.3809.100, update to version 76.0.3809.100 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾