Vulnerability Spotlight: Google PDFium Tiff Code Execution
Cisco Talos disclosed an off-by-one read/write vulnerability in the TIFF image decoder of PDFium, the PDF renderer used in Google Chrome up to and including version 60.0.3112.101. The flaw, tracked as CVE-2017-5133 and found by Talos's Aleksandar Nikolic,...