CVE-2016-1681

HIGH · 8.8 CVSS Gepubliceerd: 06-06-2016 CWE-119

Beschrijving

Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.

Vendors

Debian Opensuse Redhat Suse Google

Affected products

Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise Chrome

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securityfocus.com
www.securitytracker.com
access.redhat.com
codereview.chromium.org
crbug.com
security.gentoo.org