Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.

Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.

Security update for Chromium

chromium-browser: universal xss in blink chromium-browser: universal xss in blink chromium-browser: script injection in extensions chromium-browser: use after free in blink chromium-browser: use after free in pdfium chromium-browser: heap overflow in pdfium chromium-browser: use after destruction in blink chromium-browser: heap overflow in pdfium chromium-browser: address bar spoofing chromium-browser: use after free in event bindings chromium-browser: heap overflow in pdfium openjpeg: heap overflow due to unsafe use of opj_aligned_malloc openjpeg: heap overflow in parsing of JPEG2000 code blocks chromium-browser: extensions web accessible resources bypass chromium-browser: type confusion in blink chromium-browser: extensions web accessible resources bypass chromium-browser: address bar spoofing chromium-browser: universal xss using devtools chromium-browser: script injection in devtools chromium-browser: smb relay attack via save page as chromium-browser: various fixes from internal audits

Security update for Chromium

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser

Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.