Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects. <a href"http://cwe.mitre.org/data/definitions/416.html">CWE-416: Use After Free</a>
Publication date: Mon, 25 Jan 2016 17:59:00 +0000