Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1722
HistoryJul 31, 2009 - 12:00 a.m.

CVE-2009-1722

2009-07-3100:00:00
ubuntu.com
ubuntu.com
20

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.006

Percentile

78.4%

Heap-based buffer overflow in the compression implementation in OpenEXR
1.2.2 allows context-dependent attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via unspecified
vectors.

Bugs

Notes

Author Note
mdeslaur this was fixed in 1.6.1
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenexr< 1.2.2-4.4ubuntu1.1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.006

Percentile

78.4%