Unscored DSA-1745-1 3 CVEs

lcms - arbitrary code execution

Published Mar 20, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 4.0	lcms	1.15-1.1+etch2
Debian · 5.0	lcms	1.17.dfsg-1+lenny1

Vulnerabilities 3

Unscored —

CVE-2009-0581

Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows …

Mar 23, 2009
Unscored —

CVE-2009-0723

Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, an…

Mar 23, 2009
Unscored —

CVE-2009-0733

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18bet…

Mar 23, 2009