CVE-2015-6581
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.7%
Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.
Produtos afetados
n/a · n/aReferências
http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-October/169258.htmlhttps://code.google.com/p/chromium/issues/detail?id=486538https://code.google.com/p/chromium/issues/detail?id=526825https://code.google.com/p/openjpeg/issues/detail?id=492http://www.debian.org/security/2016/dsa-3665http://www.securitytracker.com/id/1033472