NVD

Id
48052  
Name
CVE-2009-0733  
Description
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-23  
Modified Date
2011-03-07  
Seq
2009-0733  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241034 48052 CVE-2009-0733 SUSE-SR:2009:007  View
241035 48052 CVE-2009-0733 oval:org.mitre.oval:def:9742  View
241036 48052 CVE-2009-0733 http://scary.beasts.org/security/CESA-2009-003.html  View
241037 48052 CVE-2009-0733 http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html  View
241038 48052 CVE-2009-0733 GLSA-200904-19  View
241039 48052 CVE-2009-0733 SSA:2009-083-01  View
241040 48052 CVE-2009-0733 DSA-1745  View
241041 48052 CVE-2009-0733 DSA-1769  View
241042 48052 CVE-2009-0733 MDVSA-2009:121  View
241043 48052 CVE-2009-0733 MDVSA-2009:137  View
241044 48052 CVE-2009-0733 MDVSA-2009:162  View
241045 48052 CVE-2009-0733 http://www.ocert.org/advisories/ocert-2009-003.html  View
241046 48052 CVE-2009-0733 RHSA-2009:0339  View
241047 48052 CVE-2009-0733 20090320 LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted)  View
241048 48052 CVE-2009-0733 20090320 [oCERT-2009-003] LittleCMS integer errors  View
241049 48052 CVE-2009-0733 34185  View
241050 48052 CVE-2009-0733 1021869  View
241051 48052 CVE-2009-0733 USN-744-1  View
241052 48052 CVE-2009-0733 ADV-2009-0775  View
241053 48052 CVE-2009-0733 littlecms-unspecified-code-execution(49330)  View
241054 48052 CVE-2009-0733 https://bugzilla.redhat.com/show_bug.cgi?id=487512  View
241055 48052 CVE-2009-0733 RHSA-2009:0377  View
241056 48052 CVE-2009-0733 FEDORA-2009-2903  View
241057 48052 CVE-2009-0733 FEDORA-2009-2910  View
241058 48052 CVE-2009-0733 FEDORA-2009-2928  View
241059 48052 CVE-2009-0733 FEDORA-2009-2970  View
241060 48052 CVE-2009-0733 FEDORA-2009-2982  View
241061 48052 CVE-2009-0733 FEDORA-2009-2983  View
241062 48052 CVE-2009-0733 FEDORA-2009-3034  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40128 JVNDB-2009-001134 LittleCMS におけるバッファオーバーフローの脆弱性 LittleCMS の ReadSetOfCurves 関数には、画像ファイルの処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0733 38164 CVE-2009-0733 48052 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001134.html 2009-03-23 2009-05-07 View