CVE - CVE-2009-5030

CVE-ID
CVE-2009-5030	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:48781 URL:http://secunia.com/advisories/48781 MISC:49913 URL:http://secunia.com/advisories/49913 MISC:53012 URL:http://www.securityfocus.com/bid/53012 MISC:FEDORA-2012-9602 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083105.html MISC:FEDORA-2012-9628 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082923.html MISC:MDVSA-2012:104 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2012:104~~ (Obsolete source) MISC:RHSA-2012:1068 URL:http://rhn.redhat.com/errata/RHSA-2012-1068.html MISC:[oss-security] 20120413 Re: CVE Request: Heap corruption in openjpeg URL:http://www.openwall.com/lists/oss-security/2012/04/13/5 MISC:http://code.google.com/p/openjpeg/issues/detail?id=5 URL:http://code.google.com/p/openjpeg/issues/detail?id=5 MISC:http://code.google.com/p/openjpeg/source/detail?r=1703 URL:http://code.google.com/p/openjpeg/source/detail?r=1703 MISC:https://groups.google.com/forum/#%21topic/openjpeg/DLVrRKbTeI0/discussion URL:https://groups.google.com/forum/#%21topic/openjpeg/DLVrRKbTeI0/discussion MISC:openjpeg-tcdfreeencode-code-execution(74851) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/74851
Assigning CNA
Red Hat, Inc.
Date Record Created
20101209	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20101209)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)