CVE-2009-1721

The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer.

Affected products

Alt Linux, Openexr

Openexr

= 1.2.2, 1.6.1

CVSS 2.0

6.8 MEDIUM

EPSS

4.3% (90th percentile)

Weakness

CWE-824

NVD status

Modified

Published

2009-07-31