RETIRED: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	34420
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-0793
Remote:	Yes
Local:	No
Published:	Apr 07 2009 12:00AM
Updated:	Apr 13 2015 10:15PM
Credit:	Red Hat
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 OpenJDK OpenJDK 1.6 Little CMS Little CMS 1.18
Not Vulnerable:

RETIRED: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability

Little CMS is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue by tricking a victim into opening a specially crafted image file.

Successful attacks will cause the application using the affected engine to crash.

Little CMS 1.18 is vulnerable; other versions may also be affected.

NOTE: Other applications that use Little CMS (such as Mozilla Firefox, OpenJDK, and GIMP) are likely vulnerable to this issue as well.

NOTE: This record is being retired because it is a duplicate of BID 34411 (Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability).

RETIRED: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability

Attackers can use readily available tools to create malicious files designed to leverage this issue.

RETIRED: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu1.1_sparc.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u1.1_sparc.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu1.1 _sparc.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu1.1_sparc.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu2.10.10.1_amd64.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu2.10.10.1_amd64.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu2.10.10.1_amd64.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu2.10.10.1_amd64.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu2.10.04.1_powerpc.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u2.10.04.1_powerpc.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu2.1 0.04.1_powerpc.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu2.10.04.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu liblcms-utils_1.16-7ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.3_powerpc.deb


• Ubuntu liblcms1-dev_1.16-7ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.3_ powerpc.deb


• Ubuntu liblcms1_1.16-7ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.3_powe rpc.deb


• Ubuntu python-liblcms_1.16-7ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.3_powerpc.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu1.1_i386.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu1.1_i386.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu1.1_i386.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu1.1_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu2.10.04.1_amd64.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu2.10.04.1_amd64.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu2.10.04.1_amd64.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu2.10.04.1_amd64.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu2.10.10.1_powerpc.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u2.10.10.1_powerpc.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu2.1 0.10.1_powerpc.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu2.10.10.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu liblcms-utils_1.16-7ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.3_sparc.deb


• Ubuntu liblcms1-dev_1.16-7ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.3_ sparc.deb


• Ubuntu liblcms1_1.16-7ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.3_spar c.deb


• Ubuntu python-liblcms_1.16-7ubuntu1.3_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.3_sparc.deb

Ubuntu Ubuntu Linux 9.10 ARM

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu1.1_armel.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u1.1_armel.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu1.1 _armel.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu1.1_armel.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu1.1_powerpc.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u1.1_powerpc.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu1.1 _powerpc.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu1.1_powerpc.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu1.1_amd64.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu1.1_amd64.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu1.1_amd64.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu1.1_amd64.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu liblcms-utils_1.16-7ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-7ubuntu1.3_i386.deb


• Ubuntu liblcms1-dev_1.16-7ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-7 ubuntu1.3_i386.deb


• Ubuntu liblcms1_1.16-7ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-7ubun tu1.3_i386.deb


• Ubuntu python-liblcms_1.16-7ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-7ubuntu1.3_i386.deb

Ubuntu Ubuntu Linux 10.04 ARM

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.04.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu2.10.04.1_armel.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.04.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u2.10.04.1_armel.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.04.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu2.1 0.04.1_armel.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.04.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu2.10.04.1_armel.deb

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.10.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu2.10.10.1_armel.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.10.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u2.10.10.1_armel.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.10.1_armel.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu2.1 0.10.1_armel.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.10.1_armel.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu2.10.10.1_armel.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu liblcms-utils_1.16-7ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .16-7ubuntu1.3_amd64.deb


• Ubuntu liblcms1-dev_1.16-7ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.16-7 ubuntu1.3_amd64.deb


• Ubuntu liblcms1_1.16-7ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.16-7ubun tu1.3_amd64.deb


• Ubuntu python-liblcms_1.16-7ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.16-7ubuntu1.3_amd64.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu2.10.10.1_i386.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu2.10.10.1_i386.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu2.10.10.1_i386.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu2.10.10.1_i386.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu1.1_lpia.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u1.1_lpia.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu1.1 _lpia.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu1.1_lpia.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.18.dfsg-1 ubuntu2.10.04.1_sparc.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.18.dfsg-1ubunt u2.10.04.1_sparc.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.18.dfsg-1ubuntu2.1 0.04.1_sparc.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.18.dfsg- 1ubuntu2.10.04.1_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu liblcms-utils_1.16-7ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/liblcms-utils_1.16-7ubunt u1.3_lpia.deb


• Ubuntu liblcms1-dev_1.16-7ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1-dev_1.16-7ubuntu1.3_ lpia.deb


• Ubuntu liblcms1_1.16-7ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/main/l/lcms/liblcms1_1.16-7ubuntu1.3_lpia .deb


• Ubuntu python-liblcms_1.16-7ubuntu1.3_lpia.deb
  http://ports.ubuntu.com/pool/universe/l/lcms/python-liblcms_1.16-7ubun tu1.3_lpia.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu liblcms-utils_1.18.dfsg-1ubuntu2.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/liblcms-utils_1 .18.dfsg-1ubuntu2.10.04.1_i386.deb


• Ubuntu liblcms1-dev_1.18.dfsg-1ubuntu2.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1-dev_1.18.d fsg-1ubuntu2.10.04.1_i386.deb


• Ubuntu liblcms1_1.18.dfsg-1ubuntu2.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/l/lcms/liblcms1_1.18.dfsg- 1ubuntu2.10.04.1_i386.deb


• Ubuntu python-liblcms_1.18.dfsg-1ubuntu2.10.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/l/lcms/python-liblcms_ 1.18.dfsg-1ubuntu2.10.04.1_i386.deb

RETIRED: Little CMS Monochrome Profiles Null Pointer Dereference Denial of Service Vulnerability

References:

• Little CMS Project Page (Little CMS)
  
• Null pointer dereference (DoS) by handling transformations of monochrome profile (Red Hat)