CVE-2018-17481 Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
HighCVSS 8.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/chromium(Debian:12) | < 71.0.3578.80-1 | 71.0.3578.80-1 |
| debian/chromium(Debian:13) | < 71.0.3578.80-1 | 71.0.3578.80-1 |
| debian/chromium(Debian:14) | < 71.0.3578.80-1 | 71.0.3578.80-1 |
| Google Chrome | < 71.0.3578.98 | 71.0.3578.98 |
| redhat linux desktop | = 6.0 | No fix listed |
| redhat linux server | = 6.0 | No fix listed |
| redhat linux workstation | = 6.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-17481 vendor-advisory
- 106084 vdb-entry
- RHSA-2018:3803 vendor-advisory
- chromereleases.googleblog.com
- chromereleases.googleblog.com
- crbug.com
- GLSA-201908-18 vendor-advisory
- DSA-4352 vendor-advisory
- DSA-4395 vendor-advisory