CVE-2009-5030
Fixed in a distro release EPSS 4%
The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 6.0 | openjpeg | 1.3+dfsg-4+squeeze1 |
| Red Hat Enterprise Linux 6 | openjpeg | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-debuginfo | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-devel | 0:1.3-8.el6_3 |
| Red Hat Enterprise Linux 6 | openjpeg-libs | 0:1.3-8.el6_3 |