CVE-2009-1720
High
Description
Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to (1) the Imf::PreviewImage::PreviewImage function and (2) compressor constructors. NOTE: some of these details are obtained from third party information.
SeverityHigh
CVSS7.5
Exploit probability—
ProductOpenexr
PublishedJul 31, 2009
First seenJul 31, 2009
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openexr openexr | 1.2.2, 1.6.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.