CVE-2016-1686 in Chromeinformation

Résumé

par MITRE

The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Réserver

12/01/2016

Divulgation

05/06/2016

Modérer

accepté

Entrée

VDB-87666

CPE

prêt

EPSS

0.01280

KEV

non

Activités

très faible

Sources

Want to know what is going to be exploited?

We predict KEV entries!