ByteOS Network

CVE Vulnerability Details :

CVE-2016-5157

PUBLISHED

More Info Official Page

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

Published At-11 Sep, 2016 | 10:00

Updated At-06 Aug, 2024 | 00:53

▼CVE Numbering Authority (CNA)

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html	vendor-advisory x_refsource_SUSE
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html	x_refsource_CONFIRM
https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html	vendor-advisory x_refsource_SUSE
http://www.securityfocus.com/bid/92717	vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1036729	vdb-entry x_refsource_SECTRACK
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOGCG6XHLKKJX2HKM/	vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/	vendor-advisory x_refsource_FEDORA
http://www.openwall.com/lists/oss-security/2016/09/08/5	mailing-list x_refsource_MLIST
https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9	x_refsource_CONFIRM
http://www.debian.org/security/2017/dsa-4013	vendor-advisory x_refsource_DEBIAN
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html	vendor-advisory x_refsource_SUSE
http://www.debian.org/security/2016/dsa-3660	vendor-advisory x_refsource_DEBIAN
https://crbug.com/632622	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66BWMMMWXH32J5AOGLAJGZA3GH5LZHXH/	vendor-advisory x_refsource_FEDORA
https://security.gentoo.org/glsa/201610-09	vendor-advisory x_refsource_GENTOO
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html	vendor-advisory x_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-1854.html	vendor-advisory x_refsource_REDHAT
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4IRSGYMBSHCBZP23CUDIRJ3LBKH6ZJ7/	vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGKSEWWWED77Q5ZHK4OA2EKSJXLRU3MK/	vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYLOX7PZS3ZUHQ6RGI3M6H27B7I5ZZ26/	vendor-advisory x_refsource_FEDORA
https://bugzilla.redhat.com/show_bug.cgi?id=1374337	x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securityfocus.com/bid/92717

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.securitytracker.com/id/1036729

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOGCG6XHLKKJX2HKM/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.openwall.com/lists/oss-security/2016/09/08/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2017/dsa-4013

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.debian.org/security/2016/dsa-3660

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://crbug.com/632622

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66BWMMMWXH32J5AOGLAJGZA3GH5LZHXH/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://security.gentoo.org/glsa/201610-09

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-1854.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4IRSGYMBSHCBZP23CUDIRJ3LBKH6ZJ7/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGKSEWWWED77Q5ZHK4OA2EKSJXLRU3MK/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYLOX7PZS3ZUHQ6RGI3M6H27B7I5ZZ26/

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1374337

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html	vendor-advisory x_refsource_SUSE x_transferred
https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html	x_refsource_CONFIRM x_transferred
https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securityfocus.com/bid/92717	vdb-entry x_refsource_BID x_transferred
http://www.securitytracker.com/id/1036729	vdb-entry x_refsource_SECTRACK x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOGCG6XHLKKJX2HKM/	vendor-advisory x_refsource_FEDORA x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/	vendor-advisory x_refsource_FEDORA x_transferred
http://www.openwall.com/lists/oss-security/2016/09/08/5	mailing-list x_refsource_MLIST x_transferred
https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2017/dsa-4013	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.debian.org/security/2016/dsa-3660	vendor-advisory x_refsource_DEBIAN x_transferred
https://crbug.com/632622	x_refsource_CONFIRM x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66BWMMMWXH32J5AOGLAJGZA3GH5LZHXH/	vendor-advisory x_refsource_FEDORA x_transferred
https://security.gentoo.org/glsa/201610-09	vendor-advisory x_refsource_GENTOO x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html	vendor-advisory x_refsource_SUSE x_transferred
http://rhn.redhat.com/errata/RHSA-2016-1854.html	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4IRSGYMBSHCBZP23CUDIRJ3LBKH6ZJ7/	vendor-advisory x_refsource_FEDORA x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGKSEWWWED77Q5ZHK4OA2EKSJXLRU3MK/	vendor-advisory x_refsource_FEDORA x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYLOX7PZS3ZUHQ6RGI3M6H27B7I5ZZ26/	vendor-advisory x_refsource_FEDORA x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1374337	x_refsource_CONFIRM x_transferred