CVE-2009-1722
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Products: openexr
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openexr | 1.6.1-1 |
| Debian 13 | openexr | 1.6.1-1 |
| Debian 14 | openexr | 1.6.1-1 |
| Debian 4.0 | openexr | 1.2.2-4.3+etch2 |
| Debian 5.0 | openexr | 1.6.1-3+lenny3 |