Lucene search
+L

2106 matches found

OSV
OSV
added 2016/08/07 7:59 p.m.2 views

UBUNTU-CVE-2016-5140

Heap-based buffer overflow in the opjj2kreadSQcdSQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data...

9.8CVSS7.6AI score0.01849EPSS
Exploits0References3
CVE
CVE
added 2016/08/07 7:0 p.m.83 views

CVE-2016-5140

CVE-2016-5140 corresponds to a heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function of j2k.c in OpenJPEG, used by PDFium in Google Chrome. The issue can be triggered by crafted JPEG 2000 data and may cause a denial of service or other unspecified impact. Affected product context is G...

9.8CVSS9.7AI score0.01849EPSS
Exploits0References11Affected Software1
Cvelist
Cvelist
added 2016/08/07 7:0 p.m.28 views

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

7.4AI score0.01284EPSS
Exploits0References14
Debian CVE
Debian CVE
added 2016/08/07 7:0 p.m.27 views

CVE-2016-5139

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

7.6CVSS8.8AI score0.01284EPSS
Exploits0
Debian CVE
Debian CVE
added 2016/08/07 7:0 p.m.43 views

CVE-2016-5140

Removed by vendor...

9.8CVSS9.4AI score0.01849EPSS
Exploits0
CVE
CVE
added 2016/08/07 7:0 p.m.190 views

CVE-2016-5139

CVE-2016-5139 involves multiple integer overflows in the OpenJPEG library (opj_tcd_init_tile in tcd.c) used by PDFium within Google Chrome prior to 52.0.2743.116. The flaw can cause a heap-based buffer overflow and denial of service via crafted JPEG 2000 data; some reports also indicate possible ...

7.6CVSS7.3AI score0.01284EPSS
Exploits0References14Affected Software1
RedhatCVE
RedhatCVE
added 2016/08/04 8:48 a.m.34 views

CVE-2016-5140

Heap-based buffer overflow in the opjj2kreadSQcdSQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data...

9.8CVSS6.7AI score0.01849EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2016/08/04 8:48 a.m.32 views

CVE-2016-5139

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating precinct data structures, which could lead to a crash, or potentially, code execution...

8.8CVSS3.3AI score0.01284EPSS
Exploits0References2
Fedora
Fedora
added 2016/07/14 2:53 p.m.53 views

[SECURITY] Fedora 24 Update: openjpeg2-2.1.1-1.fc24

The OpenJPEG library is an open-source JPEG 2000 library developed in order to promote the use of JPEG 2000. This package contains JPEG 2000 codec compliant with the Part 1 of the standard Class-1 Profil e-1 compliance. JP2 JPEG 2000 standard Part 2 - Handling of JP2 boxes and extended multi ple...

9.8CVSS4.4AI score0.03557EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2016/07/09 12:0 a.m.5 views

PT-2020-8033 · Openjpeg +1 · Openjpeg +1

Name of the Vulnerable Software and Affected Versions: OpenJPEG versions prior to 2.1.1 Description: The issue allows attackers to cause a denial of service, specifically memory corruption, by using a crafted jpeg 2000 file. This is due to a problem in the color esycc to rgb function...

9.8CVSS6.9AI score0.03557EPSS
Exploits0References30
CNVD
CNVD
added 2016/06/28 12:0 a.m.1 views

OpenJPEG 'imagetopnm' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in the imagetopnm function of OpenJPEG allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

7.4AI score
Exploits0
CNVD
CNVD
added 2016/06/28 12:0 a.m.2 views

OpenJPEG 'color_esycc_to_rgb' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's coloresycctorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

7.4AI score
Exploits0
CNVD
CNVD
added 2016/06/28 12:0 a.m.1 views

OpenJPEG 'sycc422_to_rgb_of_color' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc422torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

7.4AI score
Exploits0
CNVD
CNVD
added 2016/06/28 12:0 a.m.1 views

OpenJPEG 'sycc444_to_rgb_of_color' function denial of service vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc444torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2016/06/17 12:0 a.m.11 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the opjj2kreadSPCodSPCoc function in the j2k.c module of the OpenJPEG module for the PDFium browser in Google Chrome is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or other effects...

6.8CVSS7.9AI score0.01532EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/06/16 12:0 a.m.18 views

Google Chrome < 51.0.2704.63 Multiple Vulnerabilities

Binary data 9372.pasl...

8.8CVSS7.3AI score0.01534EPSS
Exploits1References2
ThreatPost
ThreatPost
added 2016/06/09 1:46 p.m.27 views

Google Patches High Severity Browser PDF Exploit

A high-severity vulnerability in Google’s Chrome browser that allows attackers to execute code on targeted systems via a PDF exploit has been patched by Google. Researchers at Cisco said users were at risk if they were enticed to view a specially crafted PDF document with an embedded jpeg2000 ima...

6.8CVSS8.7AI score0.01532EPSS
Exploits1References6
OSV
OSV
added 2016/06/05 11:59 p.m.3 views

CVE-2016-1681

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

8.8CVSS7.6AI score0.01532EPSS
Exploits1References11
NVD
NVD
added 2016/06/05 11:59 p.m.21 views

CVE-2016-1681

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

8.8CVSS9AI score0.01532EPSS
Exploits1References11
Prion
Prion
added 2016/06/05 11:59 p.m.18 views

Heap overflow

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

6.8CVSS8AI score0.01532EPSS
Exploits1References11Affected Software8
Rows per page
Query Builder