NVD

Id
17995  
Name
CVE-2016-1645  
Description
Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-03-13  
Modified Date
2016-12-02  
Seq
2016-1645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98709 17995 CVE-2016-1645 http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html  View
98710 17995 CVE-2016-1645 openSUSE-SU-2016:0817  View
98711 17995 CVE-2016-1645 openSUSE-SU-2016:0818  View
98712 17995 CVE-2016-1645 openSUSE-SU-2016:0828  View
98713 17995 CVE-2016-1645 DSA-3513  View
98714 17995 CVE-2016-1645 84224  View
98715 17995 CVE-2016-1645 1035259  View
98716 17995 CVE-2016-1645 http://www.zerodayinitiative.com/advisories/ZDI-16-197/  View
98717 17995 CVE-2016-1645 https://code.google.com/p/chromium/issues/detail?id=587227  View
98718 17995 CVE-2016-1645 https://pdfium.googlesource.com/pdfium/+/c145aeb2bf13ac408fc3e8233acca43d4251bbdc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1018 JVNDB-2016-001791 Google Chrome の PDFium で使用される OpenJPEG の j2k.c の opj_j2k_update_image_data 関数における整数符号エラーの脆弱性 Google Chrome の PDFium で使用される OpenJPEG の j2k.c の opj_j2k_update_image_data 関数には、整数符号エラーの脆弱性が存在します。 CVE-2016-1645 88151 CVE-2016-1645 17995 9.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001791.html 2016-03-08 2016-03-22 View