Upstream information
Description
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Novell/SUSE information
Novell Bugzilla entry: 479606, 490610 SUSE Security Advisories:- SUSE-SR:2009:007, published Tue, 24 Mar 2009 16:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| Novell Linux Desktop 9 for x86 Novell Linux POS 9 Open Enterprise Server SUSE CORE 9 for IBM S/390 31bit SUSE CORE 9 for x86 |
| core9.ppc core9.s390 core9.x86 core9.x86-64 sles9-nld.x86 sles9-nlpos.x86 core9.s390x sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12361 |
| SUSE CORE 9 for Itanium Processor Family |
| core9.ppc core9.s390 core9.x86 core9.x86-64 sles9-nld.x86 sles9-nlpos.x86 core9.s390x sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12361 |
| SUSE CORE 9 for IBM POWER |
| core9.ppc core9.s390 core9.x86 core9.x86-64 sles9-nld.x86 sles9-nlpos.x86 core9.s390x sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12361 |
| SUSE CORE 9 for IBM zSeries 64bit |
| core9.ppc core9.s390 core9.x86 core9.x86-64 sles9-nld.x86 sles9-nlpos.x86 core9.s390x sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12361 |
| Novell Linux Desktop 9 for x86_64 SUSE CORE 9 for AMD64 and Intel EM64T |
| core9.ppc core9.s390 core9.x86 core9.x86-64 sles9-nld.x86 sles9-nlpos.x86 core9.s390x sles9-nld.x86-64 sles9-oes.x86 core9.ia64 YOU Patch Nr: 12361 |
| SUSE Linux Enterprise Desktop 10 SP2 for x86 SUSE Linux Enterprise Server 10 SP2 for x86 |
| sles10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86-64 sles10-sp2.x86 sled10-sp2.x86 sles10-sp2.ppc sles10-sp2.s390x ZYPP Patch Nr: 6048 |
| SUSE Linux Enterprise Server 10 SP2 for IPF |
| sles10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86-64 sles10-sp2.x86 sled10-sp2.x86 sles10-sp2.ppc sles10-sp2.s390x ZYPP Patch Nr: 6048 |
| SUSE Linux Enterprise Server 10 SP2 for IBM POWER |
| sles10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86-64 sles10-sp2.x86 sled10-sp2.x86 sles10-sp2.ppc sles10-sp2.s390x ZYPP Patch Nr: 6048 |
| SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit |
| sles10-sp2.x86-64 sles10-sp2.ia64 sled10-sp2.x86-64 sles10-sp2.x86 sled10-sp2.x86 sles10-sp2.ppc sles10-sp2.s390x ZYPP Patch Nr: 6048 |
| SUSE CORE 9 for AMD64 and Intel EM64T |
| Builds YOU Patch Nr: 12773 |
| openSUSE 10.3 |
|