PT-2015-1674 · Google+5 · Google Chrome+6

Published 2015-07-21 · Updated 2024-06-15 · CVE-2015-1273

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to r3002 PDFium in Google Chrome versions prior to 44.0.2403.89

Description The issue is caused by a heap-based buffer overflow in the j2k.c file of OpenJPEG, which is used in PDFium. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document. The vulnerability can be exploited by a remote attacker using a specially crafted PDF document.

Recommendations For OpenJPEG versions prior to r3002, update to version r3002 or later to resolve the issue. For PDFium in Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue. As a temporary workaround, consider restricting the use of PDF documents with invalid JPEG2000 data until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-1729

BDU:2015-11020

CVE-2015-1273

DSA-3315-1

MGASA-2015-0288

OPENSUSE-SU-2015_1287-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2015:1499

RHSA-2015_1499

Affected Products

Alt Linux

Google Chrome

Openjpeg

Opera

Pdfium

Red Hat

Suse

References · 2479

• 🔥 https://github.com/Metnew/uxss-db/tree/master/chrome/CVE-2015-1268 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1269 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1499.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1299 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1294 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1280 · Security Note
• https://osv.dev/vulnerability/DSA-3315-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201603-09 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1277 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1282 · Security Note
• https://bdu.fstec.ru/vul/2015-10877 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1267 · Security Note
• https://bdu.fstec.ru/vul/2015-11027 · Security Note
• https://bdu.fstec.ru/vul/2015-11282 · Security Note