CVE-2016-5151: Use After Free
PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JSObject.cpp and fpdfsdk/javascript/app.cpp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5151?
CVE-2016-5151 has a severity rating classified as high due to its potential for denial of service and remote exploits.
How do I fix CVE-2016-5151?
To fix CVE-2016-5151, update Google Chrome to version 53.0.2785.89 or later on Windows and OS X, or to version 53.0.2785.92 or later on Linux.
What type of vulnerability is CVE-2016-5151?
CVE-2016-5151 is a use-after-free vulnerability related to the handling of timers in PDFium.
Who is affected by CVE-2016-5151?
CVE-2016-5151 affects Google Chrome versions up to 52.0.2743.116 and openSUSE Leap 42.1.
Can CVE-2016-5151 allow for remote attacks?
Yes, CVE-2016-5151 can be exploited by remote attackers via a specially crafted PDF document, leading to possible denial of service.