openjdk team mailing list archive

Thread
Date

[Bug 700198] Re: CVE-2009-0793

To: openjdk@xxxxxxxxxxxxxxxxxxx
From: Brian Murray <brian@xxxxxxxxxx>
Date: Mon, 10 Jan 2011 14:42:08 -0000
Reply-to: Bug 700198 <700198@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** This bug has been flagged as a security vulnerability

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to openjdk-6 in ubuntu.
https://bugs.launchpad.net/bugs/700198

Title:
  CVE-2009-0793

Status in “gimp” package in Ubuntu:
  New
Status in “ia32-libs” package in Ubuntu:
  New
Status in “lcms” package in Ubuntu:
  New
Status in “openjdk-6” package in Ubuntu:
  New
Status in “openjdk-6b18” package in Ubuntu:
  New

Bug description:
  Description
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and
other products, allows remote attackers to cause a denial of service (NULL
pointer dereference and application crash) via a crafted image that
triggers execution of incorrect code for "transformations of monochrome
profiles."