NVD

Id
48989  
Name
CVE-2009-1720  
Description
Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-07-31  
Modified Date
2012-10-22  
Seq
2009-1720  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247710 48989 CVE-2009-1720 APPLE-SA-2009-08-05-1  View
247711 48989 CVE-2009-1720 http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff  View
247712 48989 CVE-2009-1720 http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz  View
247713 48989 CVE-2009-1720 http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz  View
247714 48989 CVE-2009-1720 http://support.apple.com/kb/HT3757  View
247715 48989 CVE-2009-1720 DSA-1842  View
247716 48989 CVE-2009-1720 MDVSA-2009:190  View
247717 48989 CVE-2009-1720 MDVSA-2009:191  View
247718 48989 CVE-2009-1720 35838  View
247719 48989 CVE-2009-1720 1022674  View
247720 48989 CVE-2009-1720 USN-831-1  View
247721 48989 CVE-2009-1720 TA09-218A  View
247722 48989 CVE-2009-1720 ADV-2009-2035  View
247723 48989 CVE-2009-1720 ADV-2009-2172  View
247724 48989 CVE-2009-1720 FEDORA-2009-8132  View
247725 48989 CVE-2009-1720 FEDORA-2009-8136  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40993 JVNDB-2009-001999 OpenEXR における整数オーバーフローの脆弱性 OpenEXR には、整数オーバーフローの脆弱性が存在します。 CVE-2009-1720 39151 CVE-2009-1720 48989 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001999.html 2009-08-05 2009-09-14 View