vulnerability

SUSE: CVE-2016-5159: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Sep 6, 2016
Added
Sep 6, 2016
Modified
Feb 4, 2022

Description

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.

Solutions

suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-chromium-desktop-gnomesuse-upgrade-chromium-desktop-kdesuse-upgrade-chromium-ffmpegsumosuse-upgrade-libopenjp2-7suse-upgrade-openjpeg2suse-upgrade-openjpeg2-devel

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.