CVE

Id
39157  
CVE No.
CVE-2009-1722  
Status
Candidate  
Description
Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430546 39157 CVE-2009-1722 CONFIRM:http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz  View
430547 39157 CVE-2009-1722 CONFIRM:http://support.apple.com/kb/HT3757  View
430548 39157 CVE-2009-1722 APPLE:APPLE-SA-2009-08-05-1  View
430549 39157 CVE-2009-1722 URL:http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html  View
430550 39157 CVE-2009-1722 DEBIAN:DSA-1842  View
430551 39157 CVE-2009-1722 URL:http://www.debian.org/security/2009/dsa-1842  View
430552 39157 CVE-2009-1722 MANDRIVA:MDVSA-2009:191  View
430553 39157 CVE-2009-1722 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:191  View
430554 39157 CVE-2009-1722 UBUNTU:USN-831-1  View
430555 39157 CVE-2009-1722 URL:http://www.ubuntu.com/usn/USN-831-1  View
430556 39157 CVE-2009-1722 CERT:TA09-218A  View
430557 39157 CVE-2009-1722 URL:http://www.us-cert.gov/cas/techalerts/TA09-218A.html  View
430558 39157 CVE-2009-1722 BID:35838  View
430559 39157 CVE-2009-1722 URL:http://www.securityfocus.com/bid/35838  View
430560 39157 CVE-2009-1722 SECTRACK:1022674  View
430561 39157 CVE-2009-1722 URL:http://www.securitytracker.com/id?1022674  View
430562 39157 CVE-2009-1722 SECUNIA:36032  View
430563 39157 CVE-2009-1722 URL:http://secunia.com/advisories/36032  View
430564 39157 CVE-2009-1722 SECUNIA:36096  View
430565 39157 CVE-2009-1722 URL:http://secunia.com/advisories/36096  View
430566 39157 CVE-2009-1722 SECUNIA:36753  View
430567 39157 CVE-2009-1722 URL:http://secunia.com/advisories/36753  View
430568 39157 CVE-2009-1722 VUPEN:ADV-2009-2035  View
430569 39157 CVE-2009-1722 URL:http://www.vupen.com/english/advisories/2009/2035  View
430570 39157 CVE-2009-1722 VUPEN:ADV-2009-2172  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40987 JVNDB-2009-001993 Apple Mac OS の ColorSync における任意のコードを実行される脆弱性 Apple Mac OS の ColorSync には、ColorSync プロファイルを含むイメージの処理に不備があるため、任意のコードを実行される、あるいはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1726 39157 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001993.html  View