exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Open Source CERT Security Advisory 2009.3

Posted Mar 24, 2009

Authored by Andrea Barisani, Open Source CERT | Site ocert.org

LittleCMS, an open source color management engine, suffers from several integer errors, resulting in stack based buffer overflows and various heap errors as well as dangerous memory leaks. Decoding a specially crafted image file will result in unexpected process termination, Denial Of Service conditions or arbitrary code execution due to stack overflow. Versions 1.17 and below are affected.

tags | advisory, denial of service, overflow, arbitrary, code execution, memory leak

advisories | CVE-2009-0723, CVE-2009-0581, CVE-2009-0733

SHA-256 | 5d153924342e064a181f332c2fe5c861183cf0ba99258a99b23ce5e1958ba492

Download | Favorite | View

Related Files

No related files