CVE		CVE-2009-0793
Status		UNKNOWN
Description		cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
Severity		Medium
CVSS score		4,3
CVSS vector		(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Phase		ASSIGNED (20.01.2011)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0793
References		BID : 34411
		BID : 34420
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=492353
		DEBIAN : DSA-1769
		FEDORA : FEDORA-2009-3425
		FEDORA : FEDORA-2009-3426
		FEDORA : FEDORA-2009-3914
		FEDORA : FEDORA-2009-3967
		GENTOO : GLSA-200904-19
		MANDRIVA : MDVSA-2009:121
		MANDRIVA : MDVSA-2009:137
		MANDRIVA : MDVSA-2009:162
		OVAL : oval:org.mitre.oval:def:11340
		REDHAT : RHSA-2009:0377
		SECUNIA : 34623
		SECUNIA : 34632
		SECUNIA : 34634
		SECUNIA : 34635
		SECUNIA : 34675
		SECUNIA : 34782
		SECUNIA : 35048
		SECUNIA : 42870
		UBUNTU : USN-1043-1
		VUPEN : ADV-2009-0963
		VUPEN : ADV-2009-0964
		VUPEN : ADV-2011-0087
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
		lcms multiple security vulnerabilities