CVE-2009-0793

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer…

published April 9, 2009

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04834 · 92.0th percentile
Published
2009-04-09T15:00Z
EPSS history
Timeline
  • 09 APR 15:00Z
    cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer…
    cvelistv5