CVE-2016-5223: Integer Overflow
Published Jan 19, 2017
·Updated
Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.
Affected Software
1 affected component
Google Chrome<=54.0.2840.99
Remediation
Patch Available
Event History
Jan 19, 2017
CVE Published
via MITRE·05:43 AM
Data Sourced
via MITRE·05:43 AM
DescriptionWeakness
Data Sourced
via NVD·05:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5223?
CVE-2016-5223 has been classified as a high-severity vulnerability due to its potential to cause heap corruption or remote denial of service.
2
How do I fix CVE-2016-5223?
To fix CVE-2016-5223, users should update Google Chrome to version 55.0.2883.75 or later.
3
What platforms are affected by CVE-2016-5223?
CVE-2016-5223 affects Google Chrome on Mac, Windows, Linux, and Android platforms.
4
Can CVE-2016-5223 be exploited remotely?
Yes, CVE-2016-5223 can be exploited remotely via a specially crafted PDF file sent to the victim.
5
What type of vulnerability is CVE-2016-5223?
CVE-2016-5223 is an integer overflow vulnerability located in the PDFium component of Google Chrome.