UBUNTU-CVE-2016-5140

Heap-based buffer overflow in the opjj2kreadSQcdSQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5140

Heap-based buffer overflow in the opjj2kreadSQcdSQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data...

CVE-2016-5140

CVE-2016-5140 corresponds to a heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function of j2k.c in OpenJPEG, used by PDFium in Google Chrome. The issue can be triggered by crafted JPEG 2000 data and may cause a denial of service or other unspecified impact. Affected product context is G...

CVE-2016-5139

CVE-2016-5139 involves multiple integer overflows in the OpenJPEG library (opj_tcd_init_tile in tcd.c) used by PDFium within Google Chrome prior to 52.0.2743.116. The flaw can cause a heap-based buffer overflow and denial of service via crafted JPEG 2000 data; some reports also indicate possible ...

CVE-2016-5140

Removed by vendor...

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

Google Chrome PDFium Heap Overflow Vulnerability

Google Chrome is a web browsing tool developed by Google. A heap overflow vulnerability exists in Google Chrome PDFium. Allows remote attackers to cause a denial of service based on a heap buffer overflow or have unspecified impact via specially crafted JPEG 2000 data...

Google Chrome PDFium Heap Buffer Overflow Vulnerability

Google Chrome is a web browsing tool developed by Google. A heap buffer overflow vulnerability exists in Google Chrome PDFium. Allows remote attackers to cause a denial of service or have other effects via specially crafted JPEG 2000 data...

CVE-2016-5140

Heap-based buffer overflow in the opjj2kreadSQcdSQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 10 security fixes in this release, including: 629542 High CVE-2016-5141 Address bar spoofing. Credit to anonymous 626948 High CVE-2016-5142 Use-after-free in Blink. Credit to anonymous 625541 High CVE-2016-5139 Heap overflow in pdfium. Credit to GiWan Go of Stealie...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the opjj2kreadSPCodSPCoc function in the j2k.c module of the OpenJPEG module for the PDFium browser in Google Chrome is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or other effects...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the core/fxge/ge/fxgetext.cpp file of the Google Chrome browser’s PDFium component is related to the improper handling of certain index values. Exploiting this vulnerability can allow an attacker to trigger a service failure memory overflow during reading using a specially...

Google Chrome < 51.0.2704.63 Multiple Vulnerabilities

Binary data 9372.pasl...

Google Chrome PDFium jpeg2000 SIZ Code Execution Vulnerability

SUMMARY An exploitable heap buffer overflow vulnerability exists in the Pdfium PDF reader included in the Google Chrome web browser. A specially crafted PDF document with embedded jpeg2000 image can cause a heap buffer overflow potentially resulting in an arbitrary code execution. An attacker can...

openSUSE Security Update : Chromium (openSUSE-2016-682)

Chromium was updated to 51.0.2704.79 to fix the following vulnerabilities : - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools ...

CVE-2016-1686

The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

CVE-2016-1686

The CPDFDIBSource::CreateDecoder function in core/fpdfapi/fpdfrender/fpdfrenderloadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

CVE-2016-1685

core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...

CVE-2016-1685

core/fxge/ge/fxgetext.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...