Published: 11/09/2016 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome prior to 53.0.2785.89 on Windows and OS X and prior to 53.0.2785.92 on Linux, allows remote malicious users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
opensuse leap 42.1

Several vulnerabilities have been discovered in the chromium web browser CVE-2016-5147 A cross-site scripting issue was discovered CVE-2016-5148 Another cross-site scripting issue was discovered CVE-2016-5149 Max Justicz discovered a script injection issue in extension handling CVE-2016-5150 A use-after-free issue was discovere ...

Multiple vulnerabilities in OpenJPEG, a JPEG 2000 image compression / decompression library, may result in denial of service or the execution of arbitrary code if a malformed JPEG 2000 file is processed For the oldstable distribution (jessie), these problems have been fixed in version 210-2+deb8u3 For the stable distribution (stretch), these pr ...

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcdc in OpenJPEG, as used in PDFium in Google Chrome before 530278589 on Windows and OS X and before 530278592 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data ...

CWE-190 http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html http://www.securityfocus.com/bid/92717 http://www.securitytracker.com/id/1036729 http://www.debian.org/security/2017/dsa-4013 http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html http://www.debian.org/security/2016/dsa-3660 https://security.gentoo.org/glsa/201610-09 http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html http://rhn.redhat.com/errata/RHSA-2016-1854.html https://codereview.chromium.org/2182683002 https://crbug.com/629919 https://nvd.nist.gov https://www.debian.org/security/./dsa-3660

CVE-2016-5152

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect