CVE-2009-5030

The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted tile information in a Gray16 TIFF image, which causes insufficient memory to be allocated and leads to an "invalid free."

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Other references

• http://code.google.com/p/openjpeg/issues/detail?id=5
• http://www.openwall.com/lists/oss-security/2012/04/13/1
• https://www.cve.org/CVERecord?id=CVE-2009-5030