NVD

Id
20479  
Name
CVE-2016-5140  
Description
Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-08-07  
Modified Date
2016-11-28  
Seq
2016-5140  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112049 20479 CVE-2016-5140 http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html  View
112050 20479 CVE-2016-5140 openSUSE-SU-2016:1982  View
112051 20479 CVE-2016-5140 openSUSE-SU-2016:1983  View
112052 20479 CVE-2016-5140 RHSA-2016:1580  View
112053 20479 CVE-2016-5140 DSA-3645  View
112054 20479 CVE-2016-5140 92276  View
112055 20479 CVE-2016-5140 1036547  View
112056 20479 CVE-2016-5140 https://codereview.chromium.org/2071773002  View
112057 20479 CVE-2016-5140 https://crbug.com/619405  View
112058 20479 CVE-2016-5140 FEDORA-2016-e9798eaaa3  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3498 JVNDB-2016-004271 Google Chrome の PDFium で使用される OpenJPEG の j2k.c におけるヒープベースのバッファオーバーフローの脆弱性 Google Chrome の PDFium で使用される OpenJPEG の j2k.c の opj_j2k_read_SQcd_SQcc 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-5140 91646 CVE-2016-5140 20479 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004271.html 2016-08-03 2016-08-12 View