vulnwire
9.3crit

CVE-2009-0733

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firef…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.5%
percentile 93%
Public exploits
0
none known

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.

Exploit prediction (EPSS)

5.53% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness

References

  • redhat.com /archives/fedora-package-announce/2009-March/msg00851.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/49330 · vdb-entry, x_refsource_XF, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:137 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/34632 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34450 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1021869 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00811.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2009-03/msg00004.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • ubuntu.com /usn/USN-744-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • debian.org /security/2009/dsa-1745 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/34675 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34454 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34442 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00856.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00921.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00794.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • scary.beasts.org /security/CESA-2009-003.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/34382 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • slackware.com /security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
  • secunia.com /advisories/34418 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /archive/1/502031/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • rhn.redhat.com /errata/RHSA-2009-0377.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • ocert.org /advisories/ocert-2009-003.html · x_refsource_MISC, x_transferred
  • scarybeastsecurity.blogspot.com /2009/03/littlecms-vulnerabilities.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/34782 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34367 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:162 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • redhat.com /support/errata/RHSA-2009-0339.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • bugzilla.redhat.com /show_bug.cgi?id=487512 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2009/0775 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/34463 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/34408 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • debian.org /security/2009/dsa-1769 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/34400 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:121 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • securityfocus.com /archive/1/502018/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00799.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9742 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /bid/34185 · vdb-entry, x_refsource_BID, x_transferred
  • security.gentoo.org /glsa/glsa-200904-19.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • redhat.com /archives/fedora-package-announce/2009-March/msg00857.html · Third Party Advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.