CVE-2017-15410: Use After Free
An use after free flaw was found in the PDFium component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=765921
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
Other sources
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 63.0.3239.84 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 63.0.3239.84
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15410?
CVE-2017-15410 has a high severity rating due to the potential for exploitation via the PDFium component in Chromium.
How do I fix CVE-2017-15410?
To fix CVE-2017-15410, update your Chromium or Google Chrome browser to version 63.0.3239.84 or later.
Which platforms are affected by CVE-2017-15410?
CVE-2017-15410 affects Chromium and Google Chrome browsers on platforms like Debian Linux and Red Hat Enterprise Linux.
What are the potential consequences of CVE-2017-15410 exploitation?
Exploitation of CVE-2017-15410 can lead to arbitrary code execution and potentially allow an attacker to gain control of the affected system.
When was CVE-2017-15410 disclosed?
CVE-2017-15410 was disclosed in December 2017 by the Chromium project.