PT-2016-6259 · Openjpeg+5 · Openjpeg+6

Giwan Go · Published 2016-08-03 · Updated 2024-06-15 · CVE-2016-5139

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 52.0.2743.116 Google Chrome versions prior to 52.0.2743.116 Opera versions prior to 52.0.2743.116

Description The issue is caused by multiple integer overflows in the opj tcd init tile function in tcd.c in OpenJPEG, which is used in PDFium in Google Chrome and Opera. This allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Recommendations For OpenJPEG versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later. For Google Chrome versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later. For Opera versions prior to 52.0.2743.116, update to version 52.0.2743.116 or later. As a temporary workaround, consider disabling the opj tcd init tile function in tcd.c until a patch is available.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CESA-2017_0559

CESA-2017_0838

CVE-2016-5139

DLA-1433-1

DSA-3645-1

MGASA-2016-0279

MGASA-2017-0122

OPENSUSE-SU-2016:1982-1

OPENSUSE-SU-2016:1983-1

OPENSUSE-SU-2016_1982-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:11120-1

OPENSUSE-SU-2024:12948-1

RHSA-2016:1580

RHSA-2016_1580

RHSA-2017:0559

RHSA-2017:0838

RHSA-2017_0559

RHSA-2017_0838

Affected Products

Centos

Google Chrome

Openjpeg

Opera

Pdfium

Red Hat

Suse

References · 2379

• https://osv.dev/vulnerability/DSA-3645-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-5139 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-5139 · Vendor Advisory
• http://debian.org/security/2016/dsa-3645 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0279 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0838.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-5139 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0122 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-5139 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1433-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2016:1982-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-5139 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0279.html · Security Note