CVE-2009-0793

Published: Apr 9, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."

Affected (2)

Products: Littlecms: Lcms · Sun: Openjdk

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Littlecms Lcms	Version 1.18
Sun Openjdk	Version 6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (52)

http://secunia.com/advisories/34623

Source: secalert@redhat.com

http://secunia.com/advisories/34632

Source: secalert@redhat.com

http://secunia.com/advisories/34634

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/34635

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/34675

Source: secalert@redhat.com

http://secunia.com/advisories/34782

Source: secalert@redhat.com

http://secunia.com/advisories/35048

Source: secalert@redhat.com

http://secunia.com/advisories/42870

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200904-19.xml

Source: secalert@redhat.com

http://www.debian.org/security/2009/dsa-1769

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:121

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:137

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2009:162

Source: secalert@redhat.com

http://www.securityfocus.com/bid/34411

Source: secalert@redhat.com

http://www.securityfocus.com/bid/34420

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1043-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/0963

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2009/0964

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0087

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=492353

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11340

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2009-0377.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00203.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00204.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00233.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg00285.html

Source: secalert@redhat.com

http://secunia.com/advisories/34623