PT-2016-6279 · Openjpeg+6 · Openjpeg+7
Giwan Go
·
Publicado
2016-08-31
·
Atualizado
2024-06-15
·
CVE-2016-5159
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 53.0.2785.89 on Windows and OS X
Google Chrome versions prior to 53.0.2785.92 on Linux
Description
The issue is related to multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome. This allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during
opj aligned malloc calls in dwt.c and t1.c.Recommendations
For Google Chrome versions prior to 53.0.2785.89 on Windows and OS X, update to version 53.0.2785.89 or later.
For Google Chrome versions prior to 53.0.2785.92 on Linux, update to version 53.0.2785.92 or later.
As a temporary workaround, consider restricting the handling of JPEG 2000 data in affected systems until a patch is available.
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Google Chrome
Openjpeg
Opera
Pdfium
Red Hat
Suse