PT-2016-6260 · Opera+5 · Opera+5
Stackexploit
·
Publicado
2016-08-03
·
Atualizado
2024-06-15
·
CVE-2016-5140
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions prior to 52.0.2743.116
Google Chrome versions prior to 52.0.2743.116
Opera versions prior to 52.0.2743.116
Description
A heap-based buffer overflow issue exists in the
opj j2k read SQcd SQcc function in j2k.c in OpenJPEG. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts via crafted JPEG 2000 data.Recommendations
For OpenJPEG versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later to resolve the issue.
For Google Chrome versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later to resolve the issue.
For Opera versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later to resolve the issue.
As a temporary workaround, consider disabling the
opj j2k read SQcd SQcc function until a patch is available.Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Openjpeg
Opera
Red Hat
Suse