PT-2016-6272 · Opera+5 · Opera+5
Giwan Go
·
Publicado
2016-08-31
·
Atualizado
2024-06-15
·
CVE-2016-5152
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenJPEG versions prior to 53.0.2785.89
Google Chrome versions prior to 53.0.2785.89 on Windows and OS X
Google Chrome versions prior to 53.0.2785.92 on Linux
Opera versions prior to 53.0.2785.89
Description
The issue is related to an integer overflow in the
opj tcd get decoded tile size function in tcd.c in OpenJPEG. This can be exploited by remote attackers using crafted JPEG 2000 data, potentially leading to a denial of service (heap-based buffer overflow) or other unspecified impacts.Recommendations
For OpenJPEG, update to a version that fixes the integer overflow in the
opj tcd get decoded tile size function.
For Google Chrome on Windows and OS X, update to version 53.0.2785.89 or later.
For Google Chrome on Linux, update to version 53.0.2785.92 or later.
For Opera, update to a version that includes the fix for the integer overflow in OpenJPEG.
As a temporary workaround, consider restricting the use of crafted JPEG 2000 data until a patch is available.Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Google Chrome
Openjpeg
Opera
Red Hat
Suse