NVD

Id
20496  
Name
CVE-2016-5157  
Description
Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-11  
Modified Date
2016-11-28  
Seq
2016-5157  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112228 20496 CVE-2016-5157 openSUSE-SU-2016:2250  View
112229 20496 CVE-2016-5157 SUSE-SU-2016:2251  View
112230 20496 CVE-2016-5157 openSUSE-SU-2016:2296  View
112231 20496 CVE-2016-5157 openSUSE-SU-2016:2349  View
112232 20496 CVE-2016-5157 RHSA-2016:1854  View
112233 20496 CVE-2016-5157 DSA-3660  View
112234 20496 CVE-2016-5157 [oss-security] 20160908 Re: CVE Request: OpenJPEG Heap Buffer Overflow Issue  View
112235 20496 CVE-2016-5157 92717  View
112236 20496 CVE-2016-5157 https://bugzilla.redhat.com/show_bug.cgi?id=1374337  View
112237 20496 CVE-2016-5157 https://crbug.com/632622  View
112238 20496 CVE-2016-5157 https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea  View
112239 20496 CVE-2016-5157 https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html  View
112240 20496 CVE-2016-5157 FEDORA-2016-8ed6b7bb5e  View
112241 20496 CVE-2016-5157 FEDORA-2016-dc53ceffc2  View
112242 20496 CVE-2016-5157 FEDORA-2016-231f53426b  View
112243 20496 CVE-2016-5157 FEDORA-2016-2eac99579c  View
112244 20496 CVE-2016-5157 FEDORA-2016-adb346980c  View
112245 20496 CVE-2016-5157 FEDORA-2016-27d3b7742f  View
112246 20496 CVE-2016-5157 https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3834 JVNDB-2016-004607 Google Chrome の PDFium で使用される OpenJPEG におけるヒープベースのバッファオーバーフローの脆弱性 Google Chrome の PDFium で使用される OpenJPEG の dwt.c の opj_dwt_interleave_v 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-5157 91663 CVE-2016-5157 20496 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004607.html 2016-08-31 2016-11-18 View