LinuxSecurity.com: Drew Yao discovered several flaws in the way OpenEXR handled certainmalformed EXR image files. If a user were tricked into opening a craftedEXR image file, an attacker could cause a denial of service via applicationcrash, or possibly execute arbitrary code with the privileges of the userinvoking the program. (CVE-2009-1720, CVE-2009-1721)It was discovered that OpenEXR did not properly handle certain malformedEXR image files. If a user were tricked into opening a crafted EXR imagefile, an attacker could cause a denial of service via application crash, orpossibly execute arbitrary code with the privileges of the user invokingthe program. This issue only affected Ubuntu 8.04 LTS. (CVE-2009-1722)

More...