Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Redhat Enterprise linux server supplementary eus 6.7z (not an official CPE)
Red Hat Enterprise Linux Desktop Supplementary 6.0 (v. 6)
Red Hat Enterprise Linux Server Supplementary 6.0 (v. 6)
Opensuse Opensuse 13.2 (not an official CPE)
Debian Linux 8.0 (Jessie)
Opensuse Opensuse 13.1 (not an official CPE)
Red Hat Enterprise Linux Workstation Supplementary 6.0 (v. 6)