Vulnerability Details CVE-2015-1239
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.2%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- https://bugs.chromium.org/p/chromium/issues/detail?id=430891
- https://bugs.chromium.org/p/chromium/issues/detail?id=457493
- https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html
- https://bugs.chromium.org/p/chromium/issues/detail?id=430891
- https://bugs.chromium.org/p/chromium/issues/detail?id=457493
- https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html
Products affected by CVE-2015-1239
-
cpe:2.3:a:google:chrome:-
-
cpe:2.3:a:google:pdfium:-
-
cpe:2.3:a:uclouvain:openjpeg:-
-
cpe:2.3:a:uclouvain:openjpeg:1.0
-
cpe:2.3:a:uclouvain:openjpeg:1.1
-
cpe:2.3:a:uclouvain:openjpeg:1.2
-
cpe:2.3:a:uclouvain:openjpeg:1.3
-
cpe:2.3:a:uclouvain:openjpeg:1.4
-
cpe:2.3:a:uclouvain:openjpeg:1.5
-
cpe:2.3:a:uclouvain:openjpeg:1.5.1
-
cpe:2.3:a:uclouvain:openjpeg:1.5.2
-
cpe:2.3:a:uclouvain:openjpeg:2.0
-
cpe:2.3:a:uclouvain:openjpeg:2.0.0
-
cpe:2.3:a:uclouvain:openjpeg:2.0.1
-
cpe:2.3:a:uclouvain:openjpeg:2.1
-
cpe:2.3:a:uclouvain:openjpeg:2.1.0
-
cpe:2.3:o:debian:debian_linux:8.0