CVE-2017-15411
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Mettez à jour vers 63.0.3239.84-0ubuntu1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de chromium-browser · Page n° 74
Vulnérabilité publiée pour chromium-browser au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 1499
CVE-2017-15410
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Mettez à jour vers 63.0.3239.84-0ubuntu1
Publication Mise à jourCVE-2017-15409
Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 63.0.3239.84-0ubuntu1
Publication Mise à jourCVE-2017-15408
Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.
- Mettez à jour vers 63.0.3239.84-0ubuntu1
Publication Mise à jourCVE-2017-15407
Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.
- Mettez à jour vers 63.0.3239.84-0ubuntu1
Publication Mise à jourCVE-2018-4117
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
- Mettez à jour vers 68.0.3440.75-0ubuntu0.18.04.1
Publication Mise à jourCVE-2017-7000
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Mettez à jour vers 61.0.3163.100-0ubuntu1.1378
Publication Mise à jourCVE-2017-5133
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5132
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5131
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5130
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5128
Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5127
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5126
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5125
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-5124
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-15395
A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jourCVE-2017-15393
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
- Mettez à jour vers 62.0.3202.62-0ubuntu0.17.10.1380
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.