EUVD-2016-5781

Malware in sbrugna...

Design/Logic Flaw

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4797

CVE-2016-4797 affects OpenJPEG prior to 2.1.1. A divide-by-zero in opj_tcd_init_tile (tcd.c) causes denial of service via crafted JP2 files; issue linked to an earlier fix for CVE-2014-7947. Remediation: upgrade to OpenJPEG 2.1.1 or later as indicated in connected advisories.

RHEL 6 : chromium-browser (RHSA-2015:0093)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:0093 advisory. Chromium is an open-source web browser, powered by WebKit Blink. Several flaws were found in the processing of malformed web content. A web...

CVE-2014-7947

OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c...

CVE-2014-7947

CVE-2014-7947 affects OpenJPEG before r2944 as used in PDFium within Google Chrome up to version 40.0.2214.90/91. Root cause: an out-of-bounds read in the JPEG 2000 decoding path (files j2k.c, jp2.c, pi.c, t1.c, t2.c, tcd.c). Impact: remote attacker can trigger denial of service via a crafted PDF...