CVE-2015-1239

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-1239
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://bugs.chromium.org/p/chromium/issues/detail?id=430891 Exploit
https://bugs.chromium.org/p/chromium/issues/detail?id=457493 Exploit
https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html Third Party Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=430891 Exploit
https://bugs.chromium.org/p/chromium/issues/detail?id=457493 Exploit
https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:google:pdfium:-:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
History

21 Nov 2024, 02:24

Type Values Removed Values Added
References () https://bugs.chromium.org/p/chromium/issues/detail?id=430891 - Exploit () https://bugs.chromium.org/p/chromium/issues/detail?id=430891 - Exploit
References () https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Exploit () https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Exploit
References () https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - Third Party Advisory () https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - Third Party Advisory

29 Dec 2023, 18:05

Type Values Removed Values Added
CPE cpe:2.3:a:uclouvain:openjpeg:-:*:*:*:*:*:*:* cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*
References (CONFIRM) https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Issue Tracking, Patch, Third Party Advisory () https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Exploit
References (CONFIRM) https://bugs.chromium.org/p/chromium/issues/detail?id=430891 - Issue Tracking, Third Party Advisory () https://bugs.chromium.org/p/chromium/issues/detail?id=430891 - Exploit
References (MLIST) https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - Third Party Advisory

09 Nov 2021, 20:09

Type Values Removed Values Added
References (MLIST) https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - (MLIST) https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html - Mailing List, Third Party Advisory
References (CONFIRM) https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Issue Tracking, Third Party Advisory (CONFIRM) https://bugs.chromium.org/p/chromium/issues/detail?id=457493 - Issue Tracking, Patch, Third Party Advisory
CPE cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:a:uclouvain:openjpeg:-:*:*:*:*:*:*:*
Information

Published : 2017-10-18 17:29

Updated : 2024-11-21 02:24

NVD link : CVE-2015-1239

Mitre link : CVE-2015-1239

CVE.ORG link : CVE-2015-1239

JSON object : View

Products Affected

google

  • chrome
  • pdfium

debian

  • debian_linux

uclouvain

  • openjpeg
CWE
CWE-415

Double Free