OpenEXR 多个整数溢出漏洞

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200907-446

OpenEXR存在多个整数溢出漏洞，远程攻击者通过触发堆缓冲区溢出的未明向量导致拒绝服务攻击或执行任意代码。该漏洞与(1)程序Imf::PreviewImage::PreviewImage和(2)压缩机构造器相关。

来源;US-CERT
名称:TA09-218A
链接:http://www.us-cert.gov/cas/techalerts/TA09-218A.html
来源:BID
名称:35838
链接:http://www.securityfocus.com/bid/35838
来源:DEBIAN
名称:DSA-1842
链接:http://www.debian.org/security/2009/dsa-1842
来源:security.debian.org
链接:http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3+lenny3.diff.gz
来源:security.debian.org
链接:http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4.3+etch2.diff.gz
来源:release.debian.org
链接:http://release.debian.org/proposed-updates/stable_diffs/openexr_1.6.1-3%2Blenny3.debdiff
来源:FEDORA
名称:FEDORA-2009-8136
链接:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01290.html
来源:FEDORA
名称:FEDORA-2009-8132
链接:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01286.html
来源:VUPEN
名称:ADV-2009-2172
链接:http://www.vupen.com/english/advisories/2009/2172
来源:VUPEN
名称:ADV-2009-2035
链接:http://www.vupen.com/english/advisories/2009/2035
来源:SECTRACK
名称:1022674
链接:http://www.securitytracker.com/id?1022674