8.8
CVSSv3

CVE-2017-15408

Published: 28/08/2018 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Heap buffer overflow in Omnibox in Google Chrome before 63.0.3239.84 allowed a remote malicious user to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

debian debian linux 9.0

redhat enterprise linux desktop 6.0

redhat enterprise linux server 6.0

redhat enterprise linux workstation 6.0

Vendor Advisories

Synopsis Critical: chromium-browser security update Type/Severity Security Advisory: Critical Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scor ...
Several vulnerabilities have been discovered in the chromium web browser CVE-2017-15407 Ned Williamson discovered an out-of-bounds write issue CVE-2017-15408 Ke Liu discovered a heap overflow issue in the pdfium library CVE-2017-15409 An out-of-bounds write issue was discovered in the skia library CVE-2017-15410 Luat Nguyen dis ...
Heap buffer overflow in Omnibox in Google Chrome prior to 630323984 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium ...
A heap-based buffer overflow has been found in the PDFium component of the Chromium browser before 630323984 ...