Executive Summary

Informations
NameCVE-2009-2369First vendor Publication2009-07-08
VendorCveLast vendor Modification2009-08-12

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score6.8Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2369

CWE : Common Weakness Enumeration

idName
CWE-189Numeric Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2011-03-09Name : Gentoo Security Advisory GLSA 201009-01 (wxGTK)
File : nvt/glsa_201009_01.nasl
2009-09-21Name : Debian Security Advisory DSA 1890-1 (wxwindows2.4 wxwidgets2.6 wxwidgets2.8)
File : nvt/deb_1890_1.nasl
2009-09-02Name : Mandrake Security Advisory MDVSA-2009:204 (wxgtk)
File : nvt/mdksa_2009_204.nasl
2009-07-29Name : Fedora Core 11 FEDORA-2009-7780 (wxGTK)
File : nvt/fcore_2009_7780.nasl
2009-07-29Name : Fedora Core 11 FEDORA-2009-7755 (compat-wxGTK26)
File : nvt/fcore_2009_7755.nasl
2009-07-29Name : Fedora Core 10 FEDORA-2009-7763 (compat-wxGTK26)
File : nvt/fcore_2009_7763.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
55520wxWidgets src/common/image.cpp wxImage::Create() Function JPEG File Handling ...

Nessus® Vulnerability Scanner

DateDescription
2010-09-03Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201009-01.nasl - Type : ACT_GATHER_INFO
2010-02-24Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1890.nasl - Type : ACT_GATHER_INFO
2009-08-20Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2009-204.nasl - Type : ACT_GATHER_INFO
2009-07-23Name : The remote Fedora host is missing a security update.
File : fedora_2009-7780.nasl - Type : ACT_GATHER_INFO
2009-07-20Name : The remote Fedora host is missing a security update.
File : fedora_2009-7755.nasl - Type : ACT_GATHER_INFO
2009-07-20Name : The remote Fedora host is missing one or more security updates.
File : fedora_2009-7763.nasl - Type : ACT_GATHER_INFO
2009-07-20Name : The remote Fedora host is missing one or more security updates.
File : fedora_2009-7794.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/35552
FEDORAhttps://www.redhat.com/archives/fedora-package-announce/2009-July/msg00693.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00712.html
OSVDBhttp://osvdb.org/55520
SECUNIAhttp://secunia.com/advisories/35351
http://secunia.com/advisories/35913
VUPENhttp://www.vupen.com/english/advisories/2009/1770
XFhttp://xforce.iss.net/xforce/xfdb/51516

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:50:41
  • Multiple Updates
2013-05-10 23:53:40
  • Multiple Updates