CVE-2009-0733: Buffer Overflow
Chris Evans discovered a flaw in how LittleCms checks certain upper-bounds sizes. This flaw could potentially lead to arbitrary code execution in applications that use the system LittleCms library, or embed the source into their application.
Acknowledgements:
Red Hat would like to thank Chris Evans from the Google Security Team for reporting these issues.
Other sources
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUTA2B and ReadLUTB2A functions.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/lcmsto a version that resolves this vulnerability.Fixed in 0:1.18-0.1.beta1.el5_3.2 - Upgrade
Upgrade
redhat/javato a version that resolves this vulnerability.Fixed in 1.6.0-openjdk-1:1.6.0.0-0.30.b09.el5
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2009-0733?
CVE-2009-0733 is classified as a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2009-0733?
Fix CVE-2009-0733 by upgrading to LittleCMS version 1.18beta2 or later, or by applying relevant patches from your software vendor.
Which applications are affected by CVE-2009-0733?
CVE-2009-0733 affects multiple applications including Firefox 3.1beta, GIMP, and versions of OpenJDK before 7.
Can CVE-2009-0733 be exploited remotely?
Yes, CVE-2009-0733 can be exploited remotely by attackers through specially crafted image files.
Is CVE-2009-0733 still a risk for current systems?
CVE-2009-0733 is less of a risk for current systems that have been updated to exclude the vulnerable versions, but it is important to remain vigilant.