Memory Corruption Vulnerability in Google Chrome PDFium for Linux, Windows, and Mac
CVE-2017-5111

8.8HIGH

Key Information:

Vendor
Google
Status
Google Chrome Prior To 61.0.3163.79 For Linux, Windows And Mac
Vendor
CVE Published:
27 October 2017

Summary

A memory corruption vulnerability exists in the PDFium component of Google Chrome that can be exploited by a remote attacker through specially crafted PDF files. This flaw can lead to unexpected behavior, potentially allowing the attacker to execute arbitrary code within the context of the user's session.

Affected Version(s)

Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac

References

https://security.gentoo.org/glsa/201709-15
vendor-advisoryx_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2017:2676
vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1039291
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.