CVE-2018-16065: Out of bounds read in PDFium.

Q: What must an attacker do to trigger this issue?

The attacker must persuade a user to load a crafted HTML page. No attacker privileges are required, but user interaction is required.

Q: Which systems are exposed?

Google Chrome versions before 69.0.3497.81 are affected. The listed affected software also includes Chromium browser packages for Debian and Red Hat Enterprise Linux Desktop, Server, and Workstation.

Q: How can I determine whether a Chrome installation is affected?

Check the installed Google Chrome version. Versions earlier than 69.0.3497.81 are affected; installations at that version or later are not identified as affected by the provided data.

Published Jul 25, 2018

Updated

A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Other sources

An out of bounds write flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=867776

External References:

https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html

— Red Hat

Credit

Aleksandar Nikolic(Cisco Talos)

Affected Software

8 affected componentsFixes available

debian/chromium-browser

redhat/chromium-browser<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

Debian Debian Linux=9.0

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Workstation=6.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 69.0.3497.81

Event History

Jul 25, 2018

CVE Published

12:00 AM

Jan 9, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What must an attacker do to trigger this issue?

The attacker must persuade a user to load a crafted HTML page. No attacker privileges are required, but user interaction is required.

Which systems are exposed?

Google Chrome versions before 69.0.3497.81 are affected. The listed affected software also includes Chromium browser packages for Debian and Red Hat Enterprise Linux Desktop, Server, and Workstation.

How can I determine whether a Chrome installation is affected?

Check the installed Google Chrome version. Versions earlier than 69.0.3497.81 are affected; installations at that version or later are not identified as affected by the provided data.

CVE-2018-16065: Out of bounds read in PDFium.

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What must an attacker do to trigger this issue?

Which systems are exposed?

How can I determine whether a Chrome installation is affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to trigger this issue?

Which systems are exposed?

How can I determine whether a Chrome installation is affected?