PT-2015-1674 · Google+5 · Google Chrome+6
Publicado
2015-07-21
·
Atualizado
2024-06-15
·
CVE-2015-1273
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions prior to r3002
PDFium in Google Chrome versions prior to 44.0.2403.89
Description
The issue is caused by a heap-based buffer overflow in the j2k.c file of OpenJPEG, which is used in PDFium. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document. The vulnerability can be exploited by a remote attacker using a specially crafted PDF document.
Recommendations
For OpenJPEG versions prior to r3002, update to version r3002 or later to resolve the issue.
For PDFium in Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue.
As a temporary workaround, consider restricting the use of PDF documents with invalid JPEG2000 data until a patch is available.
Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Openjpeg
Opera
Pdfium
Red Hat
Suse