littlecms little cms color engine 1.15 vulnerabilities and exploits

(subscribe to this query)

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and previous versions allow remote malicious users to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

Littlecms Little Cms Color Engine 1.17 Littlecms Little Cms Color Engine 1.11 Littlecms Little Cms Color Engine 1.12 Littlecms Little Cms Color Engine 1.09 Littlecms Little Cms Color Engine 1.10 Littlecms Little Cms Color Engine 1.07 Littlecms Little Cms Color Engine 1.08 Littlecms Little Cms Color Engine 1.15 Littlecms Little Cms Color Engine 1.16 Littlecms Little Cms Color Engine 1.18 Littlecms Little Cms Color Engine Littlecms Little Cms Color Engine 1.13 Littlecms Little Cms Color Engine 1.14

Little CMS (lcms2) prior to 2.5, as used in OpenJDK 7 and possibly other products, allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSeque...

Littlecms Little Cms Color Engine 1.13 Littlecms Little Cms Color Engine 1.12 Littlecms Little Cms Color Engine 1.11 Littlecms Little Cms Color Engine 1.19 Littlecms Little Cms Color Engine 1.18 Littlecms Little Cms Color Engine 2.2 Littlecms Little Cms Color Engine 2.3 Littlecms Little Cms Color Engine Littlecms Little Cms Color Engine 1.10 Littlecms Little Cms Color Engine 1.09 Littlecms Little Cms Color Engine 1.16 Littlecms Little Cms Color Engine 1.14 Littlecms Little Cms Color Engine 1.07 Littlecms Little Cms Color Engine 2.1 Littlecms Little Cms Color Engine 1.17 Littlecms Little Cms Color Engine 1.15 Littlecms Little Cms Color Engine 1.08 Littlecms Little Cms Color Engine 2.0

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) prior to 1.17 allows malicious users to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, lead...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook