Home

CVE-2018-6120

Description

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.399

Associated Vulnerability

VulnerabilityOS Platform
Updates for Google Chrome (66.0.3359.170)Windows
Updates for Google Chrome (x64) (66.0.3359.170)Windows
Updates for Google Chrome (66.0.3359.181)Windows
Updates for Google Chrome (x64) (66.0.3359.181)Windows
Updates for Google Chrome (67.0.3396.62)Windows
Updates for Google Chrome (x64) (67.0.3396.62)Windows
Multiple vulnerabilities are fixed in Google Chrome for Mac 67.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Update for Google Chrome For Mac (66.0.3359.170)Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Update for Google Chrome For Mac (66.0.3359.181)Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 66.0.3359.18167.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.42Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.4267.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.48Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.4867.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.49Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.4967.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.56Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.5667.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.57Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.5767.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.59Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.5967.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 67.0.3396.6267.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3431.0Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3431.067.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3432.3Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3432.367.0.3396.62Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3438.3Mac
Vulnerabilities CVE-2018-6121,CVE-2018-6122,CVE-2018-6120 are fixed in Google Chrome for Mac 68.0.3438.367.0.3396.62Mac
chromium-browser security update(DSA-4237-1) chromium_67.0.3396.87-1~deb9u1_i386.debLinux
chromium-browser security update(DSA-4237-1) chromium_67.0.3396.87-1~deb9u1_amd64.debLinux
(RHSA-2018:1446) Important: chromium-browser security update chromium-browser-66.0.3359.170-1.el6_9.i686.rpmLinux
(RHSA-2018:1446) Important: chromium-browser security update chromium-browser-66.0.3359.170-1.el6_9.x86_64.rpmLinux
Updates for Google Chrome (66.0.3359.170) (For Ubuntu)Linux
Updates for Google Chrome (66.0.3359.170) (For Debian)Linux
Updates for Google Chrome (66.0.3359.181) (For Debian)Linux
Updates for Google Chrome (67.0.3396.62) (For Debian)Linux
Updates for Google Chrome (66.0.3359.170) (For Centos)Linux
Updates for Google Chrome (66.0.3359.181) (For Centos)Linux
Updates for Google Chrome (67.0.3396.62) (For Centos)Linux
Updates for Google Chrome (66.0.3359.170) (For RedHat)Linux
Updates for Google Chrome (66.0.3359.181) (For RedHat)Linux
Updates for Google Chrome (67.0.3396.62) (For RedHat)Linux
Updates for Google Chrome (66.0.3359.170) (For Suse)Linux
Updates for Google Chrome (66.0.3359.181) (For Suse)Linux
Updates for Google Chrome (67.0.3396.62) (For Suse)Linux
Updates for Google Chrome (66.0.3359.181) (For Ubuntu)Linux
Updates for Google Chrome (67.0.3396.62) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-307513Updates for Google Chrome (66.0.3359.170)
PATCH-307515Updates for Google Chrome (x64) (66.0.3359.170)
PATCH-307534Updates for Google Chrome (66.0.3359.181)
PATCH-307535Updates for Google Chrome (x64) (66.0.3359.181)
PATCH-307607Updates for Google Chrome (67.0.3396.62)
PATCH-307608Updates for Google Chrome (x64) (67.0.3396.62)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)
PATCH-611995Google Chrome for Mac (140.0.7339.132 , 140.0.7339.133)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234