OpenEXR Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	35838
Class:	Unknown
CVE:	CVE-2009-1720 CVE-2009-1721 CVE-2009-1722
Remote:	Yes
Local:	No
Published:	Jul 28 2009 12:00AM
Updated:	Apr 13 2015 09:58PM
Credit:	Drew Yao
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 Pardus Linux 2008 0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 5.0 x86_64 MandrakeSoft Corporate Server 5.0 MandrakeSoft Corporate Server 4.0 Industrial Light & Magic OpenEXR 1.7 Industrial Light & Magic OpenEXR 1.6 Industrial Light & Magic OpenEXR 1.2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable:	Apple Mac OS X Server 10.5.8 Apple Mac OS X 10.5.8

OpenEXR Multiple Memory Corruption Vulnerabilities

OpenEXR is prone to multiple memory-corruption vulnerabilities.

An attacker can exploit these issues by tricking a victim into opening a specially crafted OpenEXR file.

A successful attack will allow attacker-supplied code to run in the context of the victim opening the file. Failed exploit attempts will result in a denial-of-service condition.

OpenEXR Multiple Memory Corruption Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenEXR Multiple Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references for details.


Debian Linux 5.0 ia-64

• Debian libopenexr-dev_1.6.1-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_ia64.deb


• Debian libopenexr6_1.6.1-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_ia64.deb


• Debian openexr_1.6.1-3+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu libopenexr-dev_1.2.2-4.4ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.2.2-4.4ub untu1.1_powerpc.deb


• Ubuntu libopenexr2ldbl_1.2.2-4.4ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr2ldbl_1.2.2-4.4u buntu1.1_powerpc.deb


• Ubuntu openexr_1.2.2-4.4ubuntu1.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.2.2-4.4ubunt u1.1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.8.10.1_powerpc.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .8.10.1_powerpc.deb


• Ubuntu openexr_1.6.1-3ubuntu1.8.10.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .8.10.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libopenexr-dev_1.2.2-4.4ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.2.2-4.4ub untu1.1_sparc.deb


• Ubuntu libopenexr2ldbl_1.2.2-4.4ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr2ldbl_1.2.2-4.4u buntu1.1_sparc.deb


• Ubuntu openexr_1.2.2-4.4ubuntu1.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.2.2-4.4ubunt u1.1_sparc.deb

Debian Linux 5.0 alpha

• Debian libopenexr-dev_1.6.1-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_alpha.deb


• Debian libopenexr6_1.6.1-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_alpha.deb


• Debian openexr_1.6.1-3+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_alpha.deb

Mandriva Linux Mandrake 2008.0 x86_64

• Mandriva lib64OpenEXR-devel-1.4.0-3.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64OpenEXR4-1.4.0-3.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.4.0-3.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libopenexr-dev_1.2.2-4.4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr-dev_1 .2.2-4.4ubuntu1.1_amd64.deb


• Ubuntu libopenexr2ldbl_1.2.2-4.4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr2ldbl_ 1.2.2-4.4ubuntu1.1_amd64.deb


• Ubuntu openexr_1.2.2-4.4ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openexr/openexr_1.2. 2-4.4ubuntu1.1_amd64.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libOpenEXR-devel-1.4.0-3.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libOpenEXR4-1.4.0-3.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.4.0-3.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian libopenexr-dev_1.6.1-3+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_mipsel.deb


• Debian libopenexr6_1.6.1-3+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_mipsel.deb


• Debian openexr_1.6.1-3+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_mipsel.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.9.04.1_sparc.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .9.04.1_sparc.deb


• Ubuntu openexr_1.6.1-3ubuntu1.9.04.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .9.04.1_sparc.deb

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.9.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.9.04.1_powerpc.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.9.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .9.04.1_powerpc.deb


• Ubuntu openexr_1.6.1-3ubuntu1.9.04.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .9.04.1_powerpc.deb

Apple Mac OS X Server 10.5

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Debian Linux 4.0 amd64

• Debian libopenexr-dev_1.2.2-4.3+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_amd64.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_amd64.deb


• Debian openexr_1.2.2-4.3+etch2_amd64.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_amd64.deb

Debian Linux 4.0 ia-32

• Debian libopenexr-dev_1.2.2-4.3+etch2_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_i386.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_i386.deb


• Debian openexr_1.2.2-4.3+etch2_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_i386.deb

Debian Linux 4.0 hppa

• Debian libopenexr-dev_1.2.2-4.3+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_hppa.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_hppa.deb


• Debian openexr_1.2.2-4.3+etch2_hppa.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_hppa.deb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.9.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr-dev_1 .6.1-3ubuntu1.9.04.1_i386.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.9.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr6_1.6. 1-3ubuntu1.9.04.1_i386.deb


• Ubuntu openexr_1.6.1-3ubuntu1.9.04.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openexr/openexr_1.6. 1-3ubuntu1.9.04.1_i386.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.8.10.1_sparc.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .8.10.1_sparc.deb


• Ubuntu openexr_1.6.1-3ubuntu1.8.10.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .8.10.1_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.9.04.1_lpia.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .9.04.1_lpia.deb


• Ubuntu openexr_1.6.1-3ubuntu1.9.04.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .9.04.1_lpia.deb

Debian Linux 5.0 armel

• Debian libopenexr-dev_1.6.1-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_armel.deb


• Debian libopenexr6_1.6.1-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_armel.deb


• Debian openexr_1.6.1-3+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_armel.deb

Debian Linux 4.0 mipsel

• Debian libopenexr-dev_1.2.2-4.3+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_mipsel.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_mipsel.deb


• Debian openexr_1.2.2-4.3+etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_mipsel.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64OpenEXR-devel-1.6.1-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64OpenEXR6-1.6.1-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.6.1-3.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian libopenexr-dev_1.6.1-3+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_mips.deb


• Debian libopenexr6_1.6.1-3+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_mips.deb


• Debian openexr_1.6.1-3+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.9.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr-dev_1 .6.1-3ubuntu1.9.04.1_amd64.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.9.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr6_1.6. 1-3ubuntu1.9.04.1_amd64.deb


• Ubuntu openexr_1.6.1-3ubuntu1.9.04.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openexr/openexr_1.6. 1-3ubuntu1.9.04.1_amd64.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr-dev_1 .6.1-3ubuntu1.8.10.1_amd64.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr6_1.6. 1-3ubuntu1.8.10.1_amd64.deb


• Ubuntu openexr_1.6.1-3ubuntu1.8.10.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openexr/openexr_1.6. 1-3ubuntu1.8.10.1_amd64.deb

Mandriva Linux Mandrake 2009.1

• Mandriva libOpenEXR-devel-1.6.1-3.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libOpenEXR6-1.6.1-3.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.6.1-3.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 ia-64

• Debian libopenexr-dev_1.2.2-4.3+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_ia64.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_ia64.deb


• Debian openexr_1.2.2-4.3+etch2_ia64.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_ia64.deb

Debian Linux 4.0 mips

• Debian libopenexr-dev_1.2.2-4.3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_mips.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_mips.deb


• Debian openexr_1.2.2-4.3+etch2_mips.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_mips.deb

Debian Linux 5.0 sparc

• Debian libopenexr-dev_1.6.1-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_sparc.deb


• Debian libopenexr6_1.6.1-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_sparc.deb


• Debian openexr_1.6.1-3+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_sparc.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva lib64OpenEXR-devel-1.6.1-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64OpenEXR6-1.6.1-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.6.1-1.1mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2008.1

• Mandriva libOpenEXR-devel-1.6.1-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libOpenEXR6-1.6.1-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.6.1-1.1mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian libopenexr-dev_1.2.2-4.3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_arm.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_arm.deb


• Debian openexr_1.2.2-4.3+etch2_arm.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_arm.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva lib64OpenEXR-devel-1.6.1-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64OpenEXR6-1.6.1-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva OpenEXR-1.6.1-3.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr-dev_1 .6.1-3ubuntu1.8.10.1_i386.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openexr/libopenexr6_1.6. 1-3ubuntu1.8.10.1_i386.deb


• Ubuntu openexr_1.6.1-3ubuntu1.8.10.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openexr/openexr_1.6. 1-3ubuntu1.8.10.1_i386.deb

Debian Linux 4.0 powerpc

• Debian libopenexr-dev_1.2.2-4.3+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.2.2-4.3+etch2_powerpc.deb


• Debian libopenexr2c2a_1.2.2-4.3+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr2c2a_ 1.2.2-4.3+etch2_powerpc.deb


• Debian openexr_1.2.2-4.3+etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.2.2-4 .3+etch2_powerpc.deb

Debian Linux 5.0 ia-32

• Debian libopenexr-dev_1.6.1-3+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_i386.deb


• Debian libopenexr6_1.6.1-3+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_i386.deb


• Debian openexr_1.6.1-3+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_i386.deb

Debian Linux 5.0 s/390

• Debian libopenexr-dev_1.6.1-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr-dev_ 1.6.1-3+lenny3_s390.deb


• Debian libopenexr6_1.6.1-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/o/openexr/libopenexr6_1.6 .1-3+lenny3_s390.deb


• Debian openexr_1.6.1-3+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/o/openexr/openexr_1.6.1-3 +lenny3_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libopenexr-dev_1.2.2-4.4ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.2.2-4.4ub untu1.1_lpia.deb


• Ubuntu libopenexr2ldbl_1.2.2-4.4ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr2ldbl_1.2.2-4.4u buntu1.1_lpia.deb


• Ubuntu openexr_1.2.2-4.4ubuntu1.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.2.2-4.4ubunt u1.1_lpia.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu libopenexr-dev_1.6.1-3ubuntu1.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr-dev_1.6.1-3ubun tu1.8.10.1_lpia.deb


• Ubuntu libopenexr6_1.6.1-3ubuntu1.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openexr/libopenexr6_1.6.1-3ubuntu1 .8.10.1_lpia.deb


• Ubuntu openexr_1.6.1-3ubuntu1.8.10.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/o/openexr/openexr_1.6.1-3ubuntu1 .8.10.1_lpia.deb

Apple Mac OS X 10.4.11

• Apple SecUpd2009-003Intel.dmg
  Intel
  http://www.apple.com/support/downloads/


• Apple SecUpd2009-003PPC.dmg
  PPC
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-003PPC.dmg
  PowerPC
  http://www.apple.com/support/downloads/


• Apple SecUpdSrvr2009-003Univ.dmg
  Universal
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.1

• Apple MacOSXUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.1

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.2

• Apple MacOSXUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

• Apple MacOSXUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

• Apple MacOSXUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.4

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.5

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.6

• Apple MacOSXUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.6

• Apple MacOSXServerUpdCombo10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.7

• Apple MacOSXServerUpd10.5.8.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.7

• Apple MacOSXUpd10.5.8.dmg
  http://www.apple.com/support/downloads/

OpenEXR Multiple Memory Corruption Vulnerabilities

References:

• OpenEXR Homepage (Industrial Light & Magic)
  
• Vendor Homepage (NASA Goddard Space Flight Center)