Description
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Chrome
unspecified to < 71.0.3578.98affected
References
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop_12.html ↗
- https://www.debian.org/security/2019/dsa-4395 ↗
- https://crbug.com/901654 ↗
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html ↗
- https://access.redhat.com/errata/RHSA-2018:3803 ↗
- https://www.debian.org/security/2018/dsa-4352 ↗
- http://www.securityfocus.com/bid/106084 ↗
- https://security.gentoo.org/glsa/201908-18 ↗