|
|
| |
|
| |
openexr: several vulnerabilities
| Package(s): | openexr |
CVE #(s): | CVE-2009-1720
CVE-2009-1721
CVE-2009-1722
|
| Created: | July 28, 2009 |
Updated: | December 8, 2009 |
| Description: |
From the Debian advisory: Several vulnerabilities have been discovered in the OpenEXR image library, which can lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems:
Drew Yao discovered integer overflows in the preview and compression code. (CVE-2009-1720)
Drew Yao discovered that an uninitialised pointer could be freed in the decompression code. (CVE-2009-1721)
A buffer overflow was discovered in the compression code. (CVE-2009-1722)
|
| Alerts: |
|
( Log in to post comments)
|
|
|