Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5144 State: PUBLISHED Published: 2016-08-07T19:00:00 Last Updated: 2024-08-06T00:53:47.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143. Additional Analyst Notes: - CVE Program Container: References: - https://codereview.chromium.org/2065823004 - http://www.securityfocus.com/bid/92276 - https://crbug.com/618333 - http://lists.opensuse.org/
chromium.org/2065823004 - http://www.securityfocus.com/bid/92276 - https://crbug.com/618333 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html - http://rhn.redhat.com/errata/RHSA-2016-1580.html - http://www.securitytracker.com/id/1036547 - https://security.gentoo.org/glsa/201610-09 - http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html - http://www.debian.org/security/2016/dsa-3645 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A/
CVE ID: CVE-2016-5145 State: PUBLISHED Published: 2016-08-07T19:00:00 Last Updated: 2024-08-06T00:53:47.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/623406 - http://www.securityfocus.com/bid/92276 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html - http://rhn.redhat.com/errata/RH
bid/92276 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html - http://rhn.redhat.com/errata/RHSA-2016-1580.html - https://codereview.chromium.org/2096313002 - https://codereview.chromium.org/2097393002 - http://www.securitytracker.com/id/1036547 - https://codereview.chromium.org/2178513002 - https://security.gentoo.org/glsa/201610-09 - http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KMX62M7UNRLWO4FEQ6YIMPMTKXXJV6A/
CVE ID: CVE-2016-5146 State: PUBLISHED Published: 2016-08-07T19:00:00 Last Updated: 2024-08-06T00:53:47.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/633310 - https://crbug.com/620277 - http://www.securityfocus.com/bid/92276 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00006.html - http://rhn.redhat.com/errata/RHSA-2016-1580.html - http://www.securitytracker.com/id/1036547 - https://security.gentoo.org/g
://rhn.redhat.com/errata/RHSA-2016-1580.html - http://www.securitytracker.com/id/1036547 - https://security.gentoo.org/glsa/201610-09 - http://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop.html - https://crbug.com/633486 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00005.html - http://www.debian.org/security/2016/dsa-3645 - https://crbug.com/620766
CVE ID: CVE-2016-5147 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/628942 - https://codereview.chromium.org/2155393002 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2242923002 - https://google
nsuse.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2242923002 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2169453002 - https://codereview.chromium.org/2190523002/ - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://codereview.chromium.org/2174263002/ - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-securit
ian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://codereview.chromium.org/2183423002/
CVE ID: CVE-2016-5148 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.ope
03.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2134113002 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/621362 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5149 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/
://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2208483002/ - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/573131 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5150 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects. Additional Analyst Notes: - CVE Program Container: References: - http:
aScript code that leverages certain side effects. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://crbug.com/637963 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2255413004/ - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensus
.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5151 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/st
sts.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://pdfium.googlesource.com/pdfium.git/+/8ca63de14d522d3d259d74fa43b28b05b02728e8 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - https://crbug.com/634716 - http://rhn.redhat.com/err
sts.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - https://crbug.com/634716 - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5152 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/20
ttp://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://www.debian.org/security/2017/dsa-4013 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://codereview.chromium.org/21
y-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://codereview.chromium.org/2182683002 - https://crbug.com/629919
CVE ID: CVE-2016-5153 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2188623006 - https://googlech
use.org/opensuse-security-announce/2016-09/msg00003.html - https://codereview.chromium.org/2188623006 - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://codereview.chromium.org/2189813002/ - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https:/
ensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://crbug.com/631052
CVE ID: CVE-2016-5154 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/op
tps://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - https://codereview.chromium.org/2202013002/ - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/633002 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5155 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/630662 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-
mereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - https://codereview.chromium.org/2209303002 - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - https://codereview.chromium.org/2177233002/ - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5156 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleas
r: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - https://crbug.com/625404 - http://www.securitytracker.com/id/1036729 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://codereview.chromium.org/2236133002/ - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-18
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5157 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - ht
2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQ2IIIQSJ3J4MONBOGCG6XHLKKJX2HKM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/ - http://www.openwall.com/lists/oss-security/2016/09/08/5 - https://
oject.org/message/2T6IQAMS4W65MGP7UW5FPE22PXELTK5D/ - http://www.openwall.com/lists/oss-security/2016/09/08/5 - https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9 - http://www.debian.org/security/2017/dsa-4013 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2016/dsa-3660 - https://crbug.com/632622 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66BWMMMWXH32J5AOGLAJGZA3GH5LZHXH/ - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://li
use.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4IRSGYMBSHCBZP23CUDIRJ3LBKH6ZJ7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGKSEWWWED77Q5ZHK4OA2EKSJXLRU3MK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYLOX7PZS3ZUHQ6RGI3M6H27B7I5ZZ26/ - https://bugzilla.redhat.com/show_bug.cgi?id=1374337
CVE ID: CVE-2016-5158 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:47.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/
://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://rhn.redhat.com/errata/RHSA-2017-0559.html - http://rhn.redhat.com/errata/RHSA-2017-0838.html - https://pdfium.googlesource.com/pdfium.git/+/ff74356915d4c7f7c6eb16de1e9f403da4ecb6d5 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - https://crbug.com/628890 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-
tml - https://crbug.com/628890 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html - http://rhn.redhat.com/errata/RHSA-2016-1854.html
CVE ID: CVE-2016-5159 State: PUBLISHED Published: 2016-09-11T10:00:00 Last Updated: 2024-08-06T00:53:48.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromer
tainer: References: - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html - https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html - http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html - http://www.securityfocus.com/bid/92717 - http://www.securitytracker.com/id/1036729 - http://rhn.redhat.com/errata/RHSA-2017-0559.html - http://rhn.redhat.com/errata/RHSA-2017-0838.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html - http://www.debian.org/security/2017/dsa-3768 - https://crbug.com/628304 - http://www.debian.org/security/2016/dsa-3660 - https://security.gentoo.org/glsa/201610-09 - http://lis