Memory Leak Vulnerability in LittleCMS Affecting Multiple Products
CVE-2009-0581

Currently unrated

Key Information:

Vendor

Littlecms

Status
Little Cms
Vendor
CVE Published:
23 March 2009

What is CVE-2009-0581?

LittleCMS, a color management library used by various applications like Firefox, OpenJDK, and GIMP, is susceptible to a memory leak issue. This vulnerability arises due to improper handling of crafted image files, which can lead to excessive memory consumption and result in application crashes. Attackers exploiting this flaw could cause denial of service, affecting the usability and stability of the applications that rely on LittleCMS.

References

https://www.redhat.com/archives/fedora-package-announce/2...
vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/34632
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.