Denial of Service Vulnerability in LittleCMS Library by Argyros

CVE-2009-0793

Summary

The LittleCMS library, specifically in the cmsxform.c file, is susceptible to a denial of service attack due to a null pointer dereference. An attacker can exploit this vulnerability by crafting a malicious image that triggers faulty execution during monochrome profile transformations, leading to application crashes. This vulnerability affects various products that incorporate the LittleCMS library, particularly impacting OpenJDK, and poses a significant risk to systems that rely on image processing functionalities.

References