Buffer overflow in Google Chrome

CVE-2014-3198

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (66.6th percentile) — read the EPSS interpretation.

Affected products

Google Chrome
Redhat Enterprise_linux_desktop_supplementary — versions 6.0
Redhat Enterprise_linux_server_supplementary — versions 6.0
Redhat Enterprise_linux_server_supplementary_eus — versions 6.6.z
Redhat Enterprise_linux_workstation_supplementary — versions 6.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

chrome-cve-admin@google.com (x_refsource_REDHAT, vendor-advisory)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)