Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2009-5030

Опубликовано: 18 июл. 2012
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:uclouvain:openjpeg:1.3:*:*:*:*:*:*:*
cpe:2.3:a:uclouvain:openjpeg:1.4:*:*:*:*:*:*:*
cpe:2.3:a:uclouvain:openjpeg:1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04533
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
больше 13 лет назад

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."

redhat
больше 16 лет назад

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."

debian
больше 13 лет назад

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allo ...

github
больше 3 лет назад

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."

oracle-oval
больше 13 лет назад

ELSA-2012-1068: openjpeg security update (IMPORTANT)

EPSS

Процентиль: 89%
0.04533
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119
Уязвимость CVE-2009-5030