NVD

Id
52143  
Name
CVE-2009-5030  
Description
The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-07-18  
Modified Date
2012-07-21  
Seq
2009-5030  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263262 52143 CVE-2009-5030 http://code.google.com/p/openjpeg/issues/detail?id=5  View
263263 52143 CVE-2009-5030 http://code.google.com/p/openjpeg/source/detail?r=1703  View
263264 52143 CVE-2009-5030 FEDORA-2012-9628  View
263265 52143 CVE-2009-5030 FEDORA-2012-9602  View
263266 52143 CVE-2009-5030 RHSA-2012:1068  View
263267 52143 CVE-2009-5030 MDVSA-2012:104  View
263268 52143 CVE-2009-5030 [oss-security] 20120413 Re: CVE Request: Heap corruption in openjpeg  View
263269 52143 CVE-2009-5030 53012  View
263270 52143 CVE-2009-5030 openjpeg-tcdfreeencode-code-execution(74851)  View
263271 52143 CVE-2009-5030 https://groups.google.com/forum/#!topic/openjpeg/DLVrRKbTeI0/discussion  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27524 JVNDB-2012-003231 OpenJPEG の tcd.c 内の tcd_free_encode 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenJPEG の tcd.c 内の tcd_free_encode 関数には、サービス運用妨害 (メモリ破損) 状態となる、および任意のコードを実行される脆弱性が存在します。 CVE-2009-5030 42461 CVE-2009-5030 52143 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003231.html 2012-05-29 2012-07-23 View