CVE-2019-5868

Description

Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.134

Associated Vulnerability

VulnerabilityOS Platform
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100)Windows
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (x64) (76.0.3809.100)Windows
Vulnerabilities CVE-2019-5868,CVE-2019-5867 are fixed in Update for Google Chrome For Mac (76.0.3809.100)Mac
chromium security update(DSA-4500-1) chromium_76.0.3809.100-1~deb10u1_amd64.debLinux
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100) (For Debian)Linux
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100) (For Centos)Linux
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100) (For RedHat)Linux
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100) (For Suse)Linux
CVE-2019-5867 and CVE-2019-5868 fixed in Google Chrome (76.0.3809.100) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-310571Google Chrome (76.0.3809.100)
PATCH-310572Google Chrome (x64) (76.0.3809.100)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234