Логотип exploitDog
bind:"CVE-2016-8332"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2016-8332"

Количество 8

Количество 8

ubuntu логотип

CVE-2016-8332

больше 9 лет назад

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2016-8332

больше 9 лет назад

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2016-8332

больше 9 лет назад

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2016-8332

больше 9 лет назад

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution wh ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-qxqh-jjhc-4wfg

больше 3 лет назад

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2017:0207-1

около 9 лет назад

Security update for openjpeg2

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2017:0155-1

около 9 лет назад

Security update for openjpeg2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2016:3270-1

около 9 лет назад

Security update for openjpeg2

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
1%
Низкий
больше 9 лет назад
redhat логотип
CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
1%
Низкий
больше 9 лет назад
nvd логотип
CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.5
1%
Низкий
больше 9 лет назад
debian логотип
CVE-2016-8332

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution wh ...

CVSS3: 7.5
1%
Низкий
больше 9 лет назад
github логотип
GHSA-qxqh-jjhc-4wfg

A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.

CVSS3: 7.8
1%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2017:0207-1

Security update for openjpeg2

около 9 лет назад
suse-cvrf логотип
openSUSE-SU-2017:0155-1

Security update for openjpeg2

около 9 лет назад
suse-cvrf логотип
SUSE-SU-2016:3270-1

Security update for openjpeg2

около 9 лет назад

Уязвимостей на страницу