CVE-2009-0793

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."

🔗 References (52)

• secalert@redhathttp://secunia.com/advisories/34623
• secalert@redhathttp://secunia.com/advisories/34632
• secalert@redhathttp://secunia.com/advisories/34634
• secalert@redhathttp://secunia.com/advisories/34635
• secalert@redhathttp://secunia.com/advisories/34675
• secalert@redhathttp://secunia.com/advisories/34782
• secalert@redhathttp://secunia.com/advisories/35048
• secalert@redhathttp://secunia.com/advisories/42870
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200904-19.xml
• secalert@redhathttp://www.debian.org/security/2009/dsa-1769
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDVSA-2009:121
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDVSA-2009:137
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDVSA-2009:162
• secalert@redhathttp://www.securityfocus.com/bid/34411
• secalert@redhathttp://www.securityfocus.com/bid/34420