NVD

Id
17976  
Name
CVE-2016-1626  
Description
The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-02-13  
Modified Date
2016-12-05  
Seq
2016-1626  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98489 17976 CVE-2016-1626 http://googlechromereleases.blogspot.com/2016/02/stable-channel-update_9.html  View
98490 17976 CVE-2016-1626 openSUSE-SU-2016:0491  View
98491 17976 CVE-2016-1626 openSUSE-SU-2016:0518  View
98492 17976 CVE-2016-1626 RHSA-2016:0241  View
98493 17976 CVE-2016-1626 DSA-3486  View
98494 17976 CVE-2016-1626 83125  View
98495 17976 CVE-2016-1626 1035183  View
98496 17976 CVE-2016-1626 http://www.zerodayinitiative.com/advisories/ZDI-16-171  View
98497 17976 CVE-2016-1626 https://code.google.com/p/chromium/issues/detail?id=571480  View
98498 17976 CVE-2016-1626 https://codereview.chromium.org/1583233008  View
98499 17976 CVE-2016-1626 GLSA-201603-09  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
678 JVNDB-2016-001451 Google Chrome の PDFium で使用される OpenJPEG の pi.c の opj_pi_update_decode_poc 関数におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome の PDFium で使用される OpenJPEG の pi.c の opj_pi_update_decode_poc 関数は、特定のレイヤインデックス値を誤って算出するため、サービス運用妨害 (out-of-bounds read) 状態にされる脆弱性が存在します。 CVE-2016-1626 88132 CVE-2016-1626 17976 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001451.html 2016-02-09 2016-11-16 View