CVE-2016-5159

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html
http://rhn.redhat.com/errata/RHSA-2016-1854.html
http://rhn.redhat.com/errata/RHSA-2017-0559.html
http://rhn.redhat.com/errata/RHSA-2017-0838.html
http://www.debian.org/security/2016/dsa-3660
http://www.debian.org/security/2017/dsa-3768
http://www.securityfocus.com/bid/92717
http://www.securitytracker.com/id/1036729
https://codereview.chromium.org/2218783002/
https://crbug.com/628304
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html
https://security.gentoo.org/glsa/201610-09
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html
http://rhn.redhat.com/errata/RHSA-2016-1854.html
http://rhn.redhat.com/errata/RHSA-2017-0559.html
http://rhn.redhat.com/errata/RHSA-2017-0838.html
http://www.debian.org/security/2016/dsa-3660
http://www.debian.org/security/2017/dsa-3768
http://www.securityfocus.com/bid/92717
http://www.securitytracker.com/id/1036729
https://codereview.chromium.org/2218783002/
https://crbug.com/628304
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html
https://security.gentoo.org/glsa/201610-09
Configurations

Configuration 1 (hide)

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:53

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html -
References () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html -
References () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html -
References () http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - () http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html -
References () http://rhn.redhat.com/errata/RHSA-2016-1854.html - () http://rhn.redhat.com/errata/RHSA-2016-1854.html -
References () http://rhn.redhat.com/errata/RHSA-2017-0559.html - () http://rhn.redhat.com/errata/RHSA-2017-0559.html -
References () http://rhn.redhat.com/errata/RHSA-2017-0838.html - () http://rhn.redhat.com/errata/RHSA-2017-0838.html -
References () http://www.debian.org/security/2016/dsa-3660 - () http://www.debian.org/security/2016/dsa-3660 -
References () http://www.debian.org/security/2017/dsa-3768 - () http://www.debian.org/security/2017/dsa-3768 -
References () http://www.securityfocus.com/bid/92717 - () http://www.securityfocus.com/bid/92717 -
References () http://www.securitytracker.com/id/1036729 - () http://www.securitytracker.com/id/1036729 -
References () https://codereview.chromium.org/2218783002/ - () https://codereview.chromium.org/2218783002/ -
References () https://crbug.com/628304 - () https://crbug.com/628304 -
References () https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - () https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html -
References () https://security.gentoo.org/glsa/201610-09 - () https://security.gentoo.org/glsa/201610-09 -

07 Nov 2023, 02:33

Type Values Removed Values Added
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2017-0559.html - () http://rhn.redhat.com/errata/RHSA-2017-0559.html -
References (GENTOO) https://security.gentoo.org/glsa/201610-09 - () https://security.gentoo.org/glsa/201610-09 -
References (DEBIAN) http://www.debian.org/security/2016/dsa-3660 - () http://www.debian.org/security/2016/dsa-3660 -
References (CONFIRM) https://codereview.chromium.org/2218783002/ - Issue Tracking () https://codereview.chromium.org/2218783002/ -
References (CONFIRM) https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - Vendor Advisory () https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html -
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html -
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html -
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2016-1854.html - () http://rhn.redhat.com/errata/RHSA-2016-1854.html -
References (CONFIRM) https://crbug.com/628304 - Permissions Required () https://crbug.com/628304 -
References (SECTRACK) http://www.securitytracker.com/id/1036729 - () http://www.securitytracker.com/id/1036729 -
References (SUSE) http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html -
References (DEBIAN) http://www.debian.org/security/2017/dsa-3768 - () http://www.debian.org/security/2017/dsa-3768 -
References (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - () http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html -
References (REDHAT) http://rhn.redhat.com/errata/RHSA-2017-0838.html - () http://rhn.redhat.com/errata/RHSA-2017-0838.html -
References (BID) http://www.securityfocus.com/bid/92717 - () http://www.securityfocus.com/bid/92717 -

Information

Published : 2016-09-11 10:59

Updated : 2024-11-21 02:53


NVD link : CVE-2016-5159

Mitre link : CVE-2016-5159

CVE.ORG link : CVE-2016-5159


JSON object : View

Products Affected

google

  • chrome

opensuse

  • leap
CWE
CWE-190

Integer Overflow or Wraparound