CVE-2015-1359 — Off-by-one Error in Google Chrome

3 documents3 sources
Severity
6.8MEDIUMNVD
OSV7.5
EPSS
0.8%
top 25.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedJan 27
Latest updateMay 17

Description

Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted PDF document, related to an "intra-object-overflow" issue, a different vulnerability than CVE-2015-1205.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDgoogle/chrome40.0.2214.85

🔴Vulnerability Details

2
GHSA
GHSA-84hc-7w5w-q3hv: Multiple off-by-one errors in fpdfapi/fpdf_font/font_int↗2022-05-17
▶
OSV
CVE-2015-1359: Multiple off-by-one errors in fpdfapi/fpdf_font/font_int↗2015-01-27
▶