Lucene search

K
cve[email protected]CVE-2015-1279
HistoryJul 23, 2015 - 12:59 a.m.

CVE-2015-1279

2015-07-2300:59:08
CWE-189
web.nvd.nist.gov
40
cve-2015-1279
integer overflow
cjbig2_image::expand
pdfium
google chrome
remote attackers
denial of service
buffer overflow
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.

Affected configurations

NVD
Node
redhatenterprise_linux_desktop_supplementaryMatch6.0
OR
redhatenterprise_linux_server_supplementaryMatch6.0
OR
redhatenterprise_linux_server_supplementary_eusMatch6.7z
OR
redhatenterprise_linux_workstation_supplementaryMatch6.0
Node
debiandebian_linuxMatch8.0
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2
Node
googlechromeRange43.0.2357.134

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.7 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%