CVE-2009-0581

Publication date 23 March 2009

Last updated 24 July 2024


Ubuntu priority

Description

Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.

Status

Package Ubuntu Release Status
lcms 8.10 intrepid
Fixed in 1.16-10ubuntu0.2
8.04 LTS hardy
Fixed in 1.16-7ubuntu1.2
7.10 gutsy
Fixed in 1.16-5ubuntu3.2
6.06 LTS dapper
Fixed in 1.13-1ubuntu0.2

References

Related Ubuntu Security Notices (USN)

    • USN-744-1
    • LittleCMS vulnerabilities
    • 23 March 2009

Other references


Access our resources on patching vulnerabilities