CVE-2015-1273: Buffer Overflow
Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1273?
CVE-2015-1273 is considered to be of medium severity due to the potential for denial of service and other impacts from a heap-based buffer overflow.
How do I fix CVE-2015-1273?
To fix CVE-2015-1273, upgrade OpenJPEG to version r3002 or later, or update Google Chrome to version 44.0.2404.0 or higher.
What types of attacks can CVE-2015-1273 lead to?
CVE-2015-1273 can lead to denial of service attacks by allowing remote attackers to exploit vulnerabilities in PDF documents containing invalid JPEG2000 data.
Which software is affected by CVE-2015-1273?
CVE-2015-1273 affects various distributions including OpenSUSE, Red Hat Enterprise Linux, and Google Chrome versions prior to 44.0.2404.0.
What is the nature of the vulnerability in CVE-2015-1273?
CVE-2015-1273 is a heap-based buffer overflow vulnerability located in the j2k.c file of OpenJPEG.