OpenEXR: Multiple Vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact A...

GLSA-201312-07 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-07 OpenEXR: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could execute arbitrary co...

Debian DSA-1842-1 : openexr - several vulnerabilities

Several vulnerabilities have been discovered in the OpenEXR image library, which can lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1720 Drew Yao discovered integer overflows in the preview and compression...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. OpenVAS Vulnerability Test $Id: mdksa20091911.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:191-1 OpenEXR Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:191-1 (OpenEXR)

The remote host is missing an update to OpenEXR announced via advisory MDVSA-2009:191-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : OpenEXR (MDVSA-2009:191-1)

Multiple vulnerabilities has been found and corrected in OpenEXR : Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR OpenEXR-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/ VID...

SLES11: Security update for OpenEXR

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: OpenEXR More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 2009...

openSUSE 10 Security Update : OpenEXR (OpenEXR-6393)

This update of OpenEXR fixes seceral integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug CVE-2009-1721. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

SuSE 11 Security Update : OpenEXR (SAT Patch Number 1155)

This update of OpenEXR fixes several integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug. CVE-2009-1721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 10 Security Update : OpenEXR (ZYPP Patch Number 6392)

This update of OpenEXR fixes several integer overflows CVE-2009-1720, a denial-of-service probably execution of arbitrary code bug CVE-2009-1721 and another possible remote code execution bug in the compression code. CVE-2009-1721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

Ubuntu USN-831-1 (openexr)

The remote host is missing an update to openexr announced via advisory USN-831-1. OpenVAS Vulnerability Test $Id: ubuntu8311.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8311.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-831-1 openexr Authors: Thomas...

Ubuntu: Security Advisory (USN-831-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 : openexr vulnerabilities (USN-831-1)

Drew Yao discovered several flaws in the way OpenEXR handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

USN-831-1: OpenEXR vulnerabilities

Drew Yao discovered several flaws in the way OpenEXR handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user...

SuSE Security Summary SUSE-SR:2009:014

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SUSE: Security Summary (SUSE-SR:2009:014)

The remote host is missing updates announced in advisory SUSE-SR:2009:014. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

openSUSE Security Update : OpenEXR (OpenEXR-1157)

This update of OpenEXR fixes seceral integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug CVE-2009-1721. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...