CVE-2009-0733 Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attack...
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gimp | < 2.9.2 | 2.9.2 |
| mozilla Firefox | = 3.1-beta1 | No fix listed |
| sun openjdk | <= 7 | No fix listed |
| littlecms little cms | <= 1.17 | No fix listed |
References
- SUSE-SR:2009:007 third-party-advisory vendor-advisory
- scary.beasts.org exploit
- scarybeastsecurity.blogspot.com exploit
- 34367 broken-link third-party-advisory
- 34382 broken-link third-party-advisory
- 34400 broken-link third-party-advisory
- 34408 broken-link third-party-advisory
- 34418 broken-link third-party-advisory
- 34442 broken-link third-party-advisory
- 34450 broken-link third-party-advisory
- 34454 broken-link third-party-advisory
- 34463 broken-link third-party-advisory
- 34632 broken-link third-party-advisory
- 34675 broken-link third-party-advisory
- 34782 broken-link third-party-advisory
- GLSA-200904-19 third-party-advisory vendor-advisory
- SSA:2009-083-01 third-party-advisory vendor-advisory
- DSA-1745 third-party-advisory vendor-advisory
- DSA-1769 third-party-advisory vendor-advisory
- MDVSA-2009:121 broken-link vendor-advisory
- MDVSA-2009:137 broken-link vendor-advisory
- MDVSA-2009:162 broken-link vendor-advisory
- www.ocert.org third-party-advisory
- RHSA-2009:0339 third-party-advisory vendor-advisory
- 20090320 LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted) mailing-list third-party-advisory vdb-entry
- 20090320 [oCERT-2009-003] LittleCMS integer errors mailing-list third-party-advisory vdb-entry
- 34185 broken-link third-party-advisory vdb-entry
- 1021869 broken-link third-party-advisory vdb-entry
- USN-744-1 third-party-advisory vendor-advisory
- ADV-2009-0775 broken-link vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- littlecms-readsetofcurves-bo(49330) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9742 signature tool-signature vdb-entry
- RHSA-2009:0377 third-party-advisory vendor-advisory
- FEDORA-2009-2903 third-party-advisory vendor-advisory
- FEDORA-2009-2910 third-party-advisory vendor-advisory
- FEDORA-2009-2928 third-party-advisory vendor-advisory
- FEDORA-2009-2970 third-party-advisory vendor-advisory
- FEDORA-2009-2982 third-party-advisory vendor-advisory
- FEDORA-2009-2983 third-party-advisory vendor-advisory
- FEDORA-2009-3034 third-party-advisory vendor-advisory