CVE:CVE-2021-3605
CNNVD:CNNVD-202106-1444
Industrial Light And Magic（lim） OpenEXR是美国Industrial Light and Magic（LIM）（Industrial Light And Magic（lim））公司的一种图像文件格式，适用于高动态范围（HDR）图像。
OpenEXR 存在安全漏洞，该漏洞源于OpenEXR错误地处理了某些格式错误的EXR图像文件。攻击者可利用该漏洞导致拒绝服务，或者可能执行任意代码。
solution:Upgrade openexr openexr to a higher version than 3.0.5,and avoid the version (,3.0.5); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0