NVD

Id
20498  
Name
CVE-2016-5159  
Description
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-11  
Modified Date
2016-11-28  
Seq
2016-5159  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112257 20498 CVE-2016-5159 openSUSE-SU-2016:2250  View
112258 20498 CVE-2016-5159 SUSE-SU-2016:2251  View
112259 20498 CVE-2016-5159 openSUSE-SU-2016:2296  View
112260 20498 CVE-2016-5159 openSUSE-SU-2016:2349  View
112261 20498 CVE-2016-5159 RHSA-2016:1854  View
112262 20498 CVE-2016-5159 DSA-3660  View
112263 20498 CVE-2016-5159 92717  View
112264 20498 CVE-2016-5159 https://codereview.chromium.org/2218783002/  View
112265 20498 CVE-2016-5159 https://crbug.com/628304  View
112266 20498 CVE-2016-5159 https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3836 JVNDB-2016-004609 Google Chrome の PDFium で使用される OpenJPEG における整数オーバーフローの脆弱性 Google Chrome の PDFium で使用される OpenJPEG には、整数オーバーフローの脆弱性が存在します。 CVE-2016-5159 91665 CVE-2016-5159 20498 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004609.html 2016-08-31 2016-11-18 View