CVE - CVE-2016-8332

CVE-ID
CVE-2016-8332	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code execution when parsing a crafted image. An exploitable code execution vulnerability exists in the jpeg2000 image file format parser as implemented in the OpenJpeg library. A specially crafted jpeg2000 file can cause an out of bound heap write resulting in heap corruption leading to arbitrary code execution. For a successful attack, the target user needs to open a malicious jpeg2000 file. The jpeg2000 image file format is mostly used for embedding images inside PDF documents and the OpenJpeg library is used by a number of popular PDF renderers making PDF documents a likely attack vector.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:93242 URL:http://www.securityfocus.com/bid/93242 DEBIAN:DSA-3768 URL:http://www.debian.org/security/2017/dsa-3768 MISC:http://www.talosintelligence.com/reports/TALOS-2016-0193/ URL:http://www.talosintelligence.com/reports/TALOS-2016-0193/ MISC:https://github.com/uclouvain/openjpeg/releases/tag/v2.1.2 URL:https://github.com/uclouvain/openjpeg/releases/tag/v2.1.2 MISC:https://www.oracle.com/security-alerts/cpujul2020.html URL:https://www.oracle.com/security-alerts/cpujul2020.html SECTRACK:1038623 URL:http://www.securitytracker.com/id/1038623
Assigning CNA
Talos
Date Record Created
20160928	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20160928)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)