CVE-2014-7900 in Google Chrome
Summary
Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/06/2014
Disclosure
11/19/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 68236 | Google Chrome PDFium resource management | 399 | Unproven | Official fix | CVE-2014-7900 |