CVE-2015-1359

Publication date 27 January 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted PDF document, related to an "intra-object-overflow" issue, a different vulnerability than CVE-2015-1205.

Status

Package Ubuntu Release Status
chromium-browser 15.10 wily
Fixed 40.0.2214.94-0ubuntu1.1120
15.04 vivid
Fixed 40.0.2214.94-0ubuntu1.1120
14.10 utopic
Fixed 40.0.2214.94-0ubuntu0.14.10.1.1110
14.04 LTS trusty
Fixed 40.0.2214.94-0ubuntu0.14.04.1.1068
12.04 LTS precise Ignored
10.04 LTS lucid Ignored end of life
oxide-qt 15.10 wily
Not affected
15.04 vivid
Not affected
14.10 utopic
Not affected
14.04 LTS trusty Not in release
12.04 LTS precise Not in release
10.04 LTS lucid Not in release

References

Other references

Access our resources on patching vulnerabilities