CVE-2009-0581

Exploit

EPSS 1.89%
Veröffentlicht 23.03.2009 14:19:12
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 44

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Littlecms ≫ Little Cms Version <= 1.17

Gimp ≫ Gimp Version < 2.9.2

Mozilla ≫ Firefox Version3.1 Updatebeta1

Oracle ≫ Openjdk Version <= 7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.89%	0.828

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

http://secunia.com/advisories/34632

Broken Link

http://secunia.com/advisories/34675

Broken Link

http://www.debian.org/security/2009/dsa-1769

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:137

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2009:162

Broken Link

https://rhn.redhat.com/errata/RHSA-2009-0377.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html

Third Party Advisory

http://secunia.com/advisories/34418

Broken Link

http://scary.beasts.org/security/CESA-2009-003.html

Exploit

http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html

Exploit

http://secunia.com/advisories/34367

Broken Link

http://secunia.com/advisories/34382

Broken Link

http://secunia.com/advisories/34400

Broken Link

http://secunia.com/advisories/34408

Broken Link

http://secunia.com/advisories/34442

Broken Link

http://secunia.com/advisories/34450

Broken Link

http://secunia.com/advisories/34454

Broken Link

http://secunia.com/advisories/34463

Broken Link

http://secunia.com/advisories/34782

Broken Link

http://security.gentoo.org/glsa/glsa-200904-19.xml

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438

Third Party Advisory

http://www.debian.org/security/2009/dsa-1745

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2009:121

Broken Link

http://www.ocert.org/advisories/ocert-2009-003.html

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-0339.html

Third Party Advisory

http://www.securityfocus.com/archive/1/502018/100/0/threaded

Third Party Advisory

Broken Link

VDB Entry

http://www.securityfocus.com/archive/1/502031/100/0/threaded

Third Party Advisory

Broken Link

VDB Entry

http://www.securityfocus.com/bid/34185

Patch

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1021870

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/USN-744-1

Third Party Advisory

http://www.vupen.com/english/advisories/2009/0775

Patch

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487509

Issue Tracking

https://exchange.xforce.ibmcloud.com/vulnerabilities/49328

Third Party Advisory

VDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10023

Tool Signature

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00794.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00799.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00811.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00851.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00856.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00857.html

Third Party Advisory

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00921.html

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2009-0581

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0581

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0581

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0581