FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2016-1613

This CVE name corresponds to:

Entered	Topic
2016-01-21	chromium -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2016-1613 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2016-1613
Phase	Assigned(20160112)

Description

Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.

References

Source	Reference
CONFIRM	http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
CONFIRM	https://code.google.com/p/chromium/issues/detail?id=572871
CONFIRM	https://codereview.chromium.org/1564773003
CONFIRM	https://pdfium.googlesource.com/pdfium/+/dcac57bc8b64fdc870d79d11a498ae7021cf8ae7