Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

littlecms little cms color engine vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4160
Little CMS (lcms2) prior to 2.5, as used in OpenJDK 7 and possibly other products, allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSeque...
Littlecms Little Cms Color Engine 1.13Littlecms Little Cms Color Engine 1.12Littlecms Little Cms Color Engine 1.11Littlecms Little Cms Color Engine 1.19Littlecms Little Cms Color Engine 1.18Littlecms Little Cms Color Engine 2.2Littlecms Little Cms Color Engine 2.3Littlecms Little Cms Color EngineLittlecms Little Cms Color Engine 1.10Littlecms Little Cms Color Engine 1.09Littlecms Little Cms Color Engine 1.16Littlecms Little Cms Color Engine 1.14Littlecms Little Cms Color Engine 1.07Littlecms Little Cms Color Engine 2.1Littlecms Little Cms Color Engine 1.17Littlecms Little Cms Color Engine 1.15Littlecms Little Cms Color Engine 1.08Littlecms Little Cms Color Engine 2.0
NA
CVE-2013-4276
Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and previous versions allow remote malicious users to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.
Littlecms Little Cms Color Engine 1.17Littlecms Little Cms Color Engine 1.11Littlecms Little Cms Color Engine 1.12Littlecms Little Cms Color Engine 1.09Littlecms Little Cms Color Engine 1.10Littlecms Little Cms Color Engine 1.07Littlecms Little Cms Color Engine 1.08Littlecms Little Cms Color Engine 1.15Littlecms Little Cms Color Engine 1.16Littlecms Little Cms Color Engine 1.18Littlecms Little Cms Color EngineLittlecms Little Cms Color Engine 1.13Littlecms Little Cms Color Engine 1.14
9.8
CVSSv3
CVE-2013-7455
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x prior to 2.6 allows remote malicious users to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Littlecms Little Cms Color Engine 2.0Littlecms Little Cms Color Engine 2.5Littlecms Little Cms Color Engine 2.2Littlecms Little Cms Color Engine 2.1Littlecms Little Cms Color Engine 2.4Littlecms Little Cms Color Engine 2.3
NA
CVE-2008-5316
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) prior to 1.16 allows malicious users to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a...
Littlecms Lcms 1.08Littlecms Lcms 1.07Littlecms Lcms 1.10Littlecms Lcms 1.09Littlecms Little Cms Color Engine 1.09Littlecms Little Cms Color Engine 1.08Littlecms Lcms 1.14Littlecms Lcms 1.13Littlecms Little Cms Color Engine 1.14Littlecms Little Cms Color Engine 1.13Littlecms Little Cms Color Engine 1.12Littlecms LcmsLittlecms Lcms 1.12Littlecms Lcms 1.11Littlecms Little Cms Color Engine 1.11Littlecms Little Cms Color Engine 1.10Littlecms Little Cms Color Engine 1.07Littlecms Little Cms Color Engine
NA
CVE-2008-5317
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) prior to 1.17 allows malicious users to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, lead...
Littlecms Lcms 1.08Littlecms Lcms 1.07Littlecms Little Cms Color Engine 1.14Littlecms Little Cms Color Engine 1.07Littlecms Little Cms Color Engine 1.15Littlecms Lcms 1.12Littlecms Lcms 1.11Littlecms Little Cms Color Engine 1.11Littlecms Little Cms Color Engine 1.10Littlecms LcmsLittlecms Lcms 1.14Littlecms Lcms 1.13Littlecms Little Cms Color Engine 1.13Littlecms Little Cms Color Engine 1.12Littlecms Lcms 1.15Littlecms Little Cms Color EngineLittlecms Lcms 1.10Littlecms Lcms 1.09Littlecms Little Cms Color Engine 1.09Littlecms Little Cms Color Engine 1.08
5.5
CVSSv3
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Littlecms Little Cms Color Engine 2.9Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Workstation 6.0Debian Debian Linux 8.0Debian Debian Linux 9.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook