PT-2015-7350 · Opera+5 · Opera+6
Hanno Böck
·
Publicado
2015-12-01
·
Atualizado
2024-06-15
·
CVE-2015-6776
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions prior to 47.0.2526.73
Google Chrome versions prior to 47.0.2526.73
Opera versions prior to 47.0.2526.73
Description
The issue allows remote attackers to cause a denial of service or possibly have other impact via crafted JPEG 2000 data that is mishandled during a discrete wavelet transform. This is due to the
opj dwt decode 1* functions in dwt.c in OpenJPEG, as used in PDFium.Recommendations
For OpenJPEG versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later.
For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later.
For Opera versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later.
As a temporary workaround, consider restricting the use of the
opj dwt decode 1* functions in dwt.c until a patch is available.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Openjpeg
Opera
Pdfium
Red Hat
Suse