Exploitation Summary
EIP tracks 3 public exploits for CVE-2015-6787. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a heap-buffer-overflow vulnerability in PDFium (Chrome's PDF renderer) triggered by a malformed PDF file. The crash occurs in CPDF_TextObject::CalcPositionData due to an out-of-bounds read, leading to a denial-of-service condition.
Description
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Exploits (3)
This exploit demonstrates a heap-buffer-overflow vulnerability in PDFium (Chrome's PDF renderer) triggered by a malformed PDF file. The crash occurs in CPDF_TextObject::CalcPositionData due to an out-of-bounds read, leading to a denial-of-service condition.
This exploit demonstrates a stack-based buffer overflow in PDFium (Chrome's PDF renderer) via a crafted PDF file, leading to a crash and potential remote code execution. The PoC includes a PDF file that triggers the vulnerability during rendering.
This exploit demonstrates a heap-buffer-overflow vulnerability in PDFium, the Chrome PDF renderer, which can be triggered by a malformed PDF file. The crash occurs in the `CPDF_DIBSource::DownSampleScanline32Bit` function, leading to a potential denial-of-service (DoS) condition.