QwikSec

Security Database

CVE

CWE

Training

CVE-2014-3189

Published: Oct 8, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://codereview.chromium.org/519873002/

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

https://crbug.com/398384

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

http://googlechromereleases.blogspot.com/2014/10/stable-channel-update.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.