CVE-2009-1722

Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors...

CVE-2009-1722

OpenEXR vulnerability CVE-2009-1722 is a buffer overflow in the compression path of the OpenEXR 1.2.2 library. The related advisories describe additional issues (CVE-2009-1720 and CVE-2009-1721) in the same OpenEXR stack, including heap-based overflows in the PreviewImage and hufUncompress/decomp...

CVE-2009-1721

OpenEXR versions affected: 1.2.2 and 1.6.1. The issue is in the decompression path (Imf::hufUncompress) where a free of an uninitialized pointer could corrupt memory, enabling a denial of service or potentially arbitrary code execution. Affected components: OpenEXR’s decompression code. Remediati...

CVE-2009-1720

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...

CVE-2009-1720

CVE-2009-1720 concerns multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 that can trigger a denial of service or potentially execute arbitrary code. The issues relate to the Imf::PreviewImage::PreviewImage function and to compressor constructors (heap-based buffer overflows). Public documenta...

CVE-2009-1720

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...

CVE-2009-1722

Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors...

CVE-2009-1721

The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...

[SECURITY] Fedora 10 Update: OpenEXR-1.6.1-8.fc10

OpenEXR is a high dynamic-range HDR image file format developed by Indust rial Light & Magic for use in computer imaging applications. This package contai ns libraries and sample applications for handling the format...

[SECURITY] Fedora 11 Update: OpenEXR-1.6.1-8.fc11

OpenEXR is a high dynamic-range HDR image file format developed by Indust rial Light & Magic for use in computer imaging applications. This package contai ns libraries and sample applications for handling the format...

Debian Security Advisory DSA 1842-1 (openexr)

The remote host is missing an update to openexr announced via advisory DSA 1842-1. OpenVAS Vulnerability Test $Id: deb18421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1842-1 openexr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1842-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1842-1] New openexr packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1842-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 28, 2009 http://www.debian.org/security/faq -...

OpenEXR multiple security vulnerabilities

Integer overflow, buffer overflow, uninitialized pointer...

DSA-1842-1 openexr - several vulnerabilities

Bulletin has no description...

CVE-2006-2277

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...

Open redirect

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...

CVE-2006-2277

Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service application crash via a crafted OpenEXR .exr image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file...

CVE-2006-2277

CVE-2006-2277 affects multiple Apple Mac OS X 10.4 applications. A crafted OpenEXR (.exr) image file may cause context-dependent attackers to trigger a denial of service (application crash) when users open a folder with Finder, display the image in Safari, or open the file with Preview. The descr...

Apple Mac OSX 10.x - ImageIO OpenEXR Image File Remote Denial of Service

source: https://www.securityfocus.com/bid/17768/info ImageIO is susceptible to a remote denial-of-service vulnerability. This issue is do to a failure to properly process malicious OpenEXR image files. This issue allows remote users to crash applications that use the ImageIO API, denying further...