Skip to content
OpenAdvisories
Unscored DSA-1842-1 3 CVEs

openexr - several vulnerabilities

Published Jul 28, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 openexr 1.2.2-4.3+etch2
Debian · 5.0 openexr 1.6.1-3+lenny3

Vulnerabilities 3

  • Unscored —

    Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (a…

  • Unscored —

    The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent…

  • Unscored —

    Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cau…