CVE

Id
76948  
CVE No.
CVE-2014-9647  
Status
Candidate  
Description
Use-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/src/fpdfview.cpp and fpdfsdk/src/fsdk_mgr.cpp, a different vulnerability than CVE-2015-1205.  
Phase
Assigned (20150126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
705943 76948 CVE-2014-9647 CONFIRM:http://googlechromereleases.blogspot.com/2015/01/stable-update.html  View
705944 76948 CVE-2014-9647 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=410326  View
705945 76948 CVE-2014-9647 CONFIRM:https://code.google.com/p/chromium/issues/detail?id=449894  View
705946 76948 CVE-2014-9647 CONFIRM:https://pdfium.googlesource.com/pdfium/+/facd0157ce975158da1659fb58a16c1308bd553b  View
705947 76948 CVE-2014-9647 GENTOO:GLSA-201502-13  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19282 JVNDB-2014-008160 LibTIFF の tif_getimage.c または tif_next.c におけるサービス運用妨害 (DoS) の脆弱性 LibTIFF の (1) tif_getimage.c の putcontig8bitYCbCr21tile 関数または (2) tif_next.c の NeXTDecode 関数には、サービス運用妨害 (初期化されていないメモリアクセス) 状態にされる脆弱性が存在します。 CVE-2014-9655 76948 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008160.html  View