CVE-2015-1239: Double Free
Published Oct 18, 2017
·Updated
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
Affected Software
6 affected components
uclouvain openjpeg
Google PDFium
Google Chrome
Debian Debian Linux=8.0
Google Chrome
uclouvain openjpeg<2.1.1
Remediation
Patch Available
Event History
Oct 18, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2015-1239?
CVE-2015-1239 has a severity rating that allows remote attackers to cause a denial of service due to a double free vulnerability.
2
How do I fix CVE-2015-1239?
To fix CVE-2015-1239, update OpenJPEG to a version later than 2.1.1.
3
Which software is affected by CVE-2015-1239?
CVE-2015-1239 affects OpenJPEG versions before r2997, as well as its use in PDFium within Google Chrome.
4
What type of attack does CVE-2015-1239 enable?
CVE-2015-1239 enables remote attackers to execute a denial of service attack that results in process crashes.
5
Is Google Chrome directly affected by CVE-2015-1239?
Google Chrome itself is not directly affected by CVE-2015-1239, but it utilizes the vulnerable OpenJPEG library through PDFium.