Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors. NOTE: some of these details are obtained from third party information.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2009-07-31T18:29:00
Updated: 2019-09-23T16:38:58
Reserved: 2009-05-20T00:00:00
Link: CVE-2009-1720
JSON object: View
NVD Information
Status : Modified
Published: 2009-07-31T19:00:01.030
Modified: 2012-10-23T03:06:35.913
Link: CVE-2009-1720
JSON object: View
Redhat Information
No data.
CWE