[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZ1bNqUMRpwVg2HE2SvCB9WWhlXjq7uNIGWJ4K6XG9uE":3,"g5a-risk:CVE-2009-0733":281},{"success":4,"data":5,"meta":279},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":55,"references":56,"referencesCount":220,"weaknesses":221,"weaknessesCount":229,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":230,"seoMetadata":231,"configurations":256,"relatedVendorCves":277,"notableEvents":278},"CVE-2009-0733","What is CVE-2009-0733?","Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.","Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJD...","2009-03-23T14:19:12.517","2026-06-16T23:05:39.653",9.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","COMPLETE","",null,"HIGH",8.6,10,false,[],0.05534,[34,34,34,34,34,34,34],"Critical",[38,42,47,51],{"vendor":39,"product":39,"version":40,"criteria":41,"vulnerable":4},"gimp","*","cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"mozilla","firefox","3.1","cpe:2.3:a:mozilla:firefox:3.1:beta1:*:*:*:*:*:*",{"vendor":48,"product":49,"version":40,"criteria":50,"vulnerable":4},"sun","openjdk","cpe:2.3:a:sun:openjdk:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":40,"criteria":54,"vulnerable":4},"littlecms","little_cms","cpe:2.3:a:littlecms:little_cms:*:*:*:*:*:*:*:*",4,[57,62,67,71,76,79,82,85,88,91,94,97,100,103,106,109,113,117,121,124,128,131,134,138,142,147,150,153,157,161,165,169,173,178,181,184,187,190,193,196,199,202,204,206,208,210,212,214,216,218],{"url":58,"source":59,"tags":60},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2009-03\u002Fmsg00004.html","Opensuse",[61],"Third Party Advisory",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fscary.beasts.org\u002Fsecurity\u002FCESA-2009-003.html","Beasts",[66],"Exploit",{"url":68,"source":69,"tags":70},"http:\u002F\u002Fscarybeastsecurity.blogspot.com\u002F2009\u002F03\u002Flittlecms-vulnerabilities.html","Blogspot",[66],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34367","Secunia",[75],"Broken Link",{"url":77,"source":73,"tags":78},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34382",[75],{"url":80,"source":73,"tags":81},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34400",[75],{"url":83,"source":73,"tags":84},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34408",[75],{"url":86,"source":73,"tags":87},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34418",[75],{"url":89,"source":73,"tags":90},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34442",[75],{"url":92,"source":73,"tags":93},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34450",[75],{"url":95,"source":73,"tags":96},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34454",[75],{"url":98,"source":73,"tags":99},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34463",[75],{"url":101,"source":73,"tags":102},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34632",[75],{"url":104,"source":73,"tags":105},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34675",[75],{"url":107,"source":73,"tags":108},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F34782",[75],{"url":110,"source":111,"tags":112},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-200904-19.xml","Gentoo",[61],{"url":114,"source":115,"tags":116},"http:\u002F\u002Fslackware.com\u002Fsecurity\u002Fviewer.php?l=slackware-security&y=2009&m=slackware-security.487438","Slackware",[61],{"url":118,"source":119,"tags":120},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1745","Debian",[61],{"url":122,"source":119,"tags":123},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2009\u002Fdsa-1769",[61],{"url":125,"source":126,"tags":127},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:121","Mandriva",[75],{"url":129,"source":126,"tags":130},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:137",[75],{"url":132,"source":126,"tags":133},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2009:162",[75],{"url":135,"source":136,"tags":137},"http:\u002F\u002Fwww.ocert.org\u002Fadvisories\u002Focert-2009-003.html","Ocert",[61],{"url":139,"source":140,"tags":141},"http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2009-0339.html","Red Hat",[61],{"url":143,"source":144,"tags":145},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F502018\u002F100\u002F0\u002Fthreaded","Securityfocus",[61,146],"VDB Entry",{"url":148,"source":144,"tags":149},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F502031\u002F100\u002F0\u002Fthreaded",[61,146],{"url":151,"source":144,"tags":152},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F34185",[75,61,146],{"url":154,"source":155,"tags":156},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1021869","Securitytracker",[75,61,146],{"url":158,"source":159,"tags":160},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-744-1","Ubuntu",[61],{"url":162,"source":163,"tags":164},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F0775","Vupen",[75],{"url":166,"source":140,"tags":167},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=487512",[168,61],"Issue Tracking",{"url":170,"source":171,"tags":172},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F49330","Ibmcloud",[61,146],{"url":174,"source":175,"tags":176},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A9742","Cisecurity",[177],"Tool Signature",{"url":179,"source":140,"tags":180},"https:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2009-0377.html",[61],{"url":182,"source":140,"tags":183},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00794.html",[61],{"url":185,"source":140,"tags":186},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00799.html",[61],{"url":188,"source":140,"tags":189},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00811.html",[61],{"url":191,"source":140,"tags":192},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00851.html",[61],{"url":194,"source":140,"tags":195},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00856.html",[61],{"url":197,"source":140,"tags":198},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00857.html",[61],{"url":200,"source":140,"tags":201},"https:\u002F\u002Fwww.redhat.com\u002Farchives\u002Ffedora-package-announce\u002F2009-March\u002Fmsg00921.html",[61],{"url":58,"source":59,"tags":203},[61],{"url":63,"source":64,"tags":205},[66],{"url":68,"source":69,"tags":207},[66],{"url":72,"source":73,"tags":209},[75],{"url":77,"source":73,"tags":211},[75],{"url":80,"source":73,"tags":213},[75],{"url":83,"source":73,"tags":215},[75],{"url":86,"source":73,"tags":217},[75],{"url":89,"source":73,"tags":219},[75],50,[222],{"id":223,"name":224,"description":225,"extendedDescription":27,"status":226,"abstraction":227,"structure":228},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,[],{"title":232,"metaDescription":233,"keywords":234,"canonicalUrl":235,"structuredData":236},"What is CVE-2009-0733? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-0733, a critical severity cyber security vulnerability from 2009. Multiple stack-based buffer overflows in the ReadSetOfCu...","CVE-2009-0733, CVE-2009-0733 vulnerability, CVE-2009-0733 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, gimp security, mozilla security, sun security, littlecms security, gimp vulnerability, firefox vulnerability, openjdk vulnerability, little_cms vulnerability","\u002Fwhat-is\u002Fcve-2009-0733",{"@context":237,"@type":238,"headline":232,"description":233,"datePublished":10,"dateModified":11,"author":239,"publisher":243,"about":247,"mainEntityOfPage":251,"articleSection":254,"keywords":255},"https:\u002F\u002Fschema.org","TechArticle",{"@type":240,"name":241,"url":242},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":240,"name":241,"url":242,"logo":244},{"@type":245,"url":246},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":248,"name":6,"description":249,"additionalType":250},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":252,"@id":253},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-0733","Cybersecurity","CVE-2009-0733, CVE-2009-0733 vulnerability, CVE-2009-0733 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[257,270],{"Operator":28,"Negate":28,"Nodes":258},[259],{"Operator":260,"Negate":32,"CPEMatch":261},"OR",[262,265,267],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":263,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":264,"VersionEndIncluding":28},"28CB30F0-E3AF-490A-B05B-0947A2BF717B","2.9.2",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":266,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0F72BFD4-000D-4B07-8261-C9F6839AD150",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":268,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":269},"3BD10277-3747-438E-BB0F-CC7E71602FC1","7",{"Operator":28,"Negate":28,"Nodes":271},[272],{"Operator":260,"Negate":32,"CPEMatch":273},[274],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":275,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":276},"5DAF1951-51CA-4FCC-94EE-3713860D6598","1.17",[],[],{"lastModified":11,"cacheTime":280,"version":22},1792268365347,{"score":282,"band":283,"action":284,"scoredAt":285},51,"Medium","Plan remediation","2026-10-17T06:36:25.133986+00:00"]