Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1626

Опубликовано: 14 фев. 2016
Источник: nvd
CVSS3: 4.3
CVSS2: 4.3
EPSS Низкий

Описание

The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:48.0.2564.103:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 70%
0.00638
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 10 лет назад

The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

redhat
почти 10 лет назад

The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

CVSS3: 4.3
debian
почти 10 лет назад

The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in ...

CVSS3: 4.3
github
больше 3 лет назад

The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

fstec
почти 10 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 70%
0.00638
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119