← back
CVE-2009-0723

CVE-2009-0723

EPSS 5.0%
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=487508http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.htmlhttp://scary.beasts.org/security/CESA-2009-003.htmlhttp://secunia.com/advisories/34367http://secunia.com/advisories/34382http://secunia.com/advisories/34400http://secunia.com/advisories/34408http://secunia.com/advisories/34418http://secunia.com/advisories/34442http://secunia.com/advisories/34450http://secunia.com/advisories/34454