Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.
{
"binaries": [
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-browser"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-browser-l10n"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-chromedriver"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-codecs-ffmpeg"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-codecs-ffmpeg-extra"
}
],
"availability": "No subscription required"
}
{
"binaries": [
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-browser"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-browser-l10n"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-chromedriver"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-codecs-ffmpeg"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-codecs-ffmpeg-extra"
}
],
"availability": "No subscription required"
}