| Package | Affected versions | Patched versions |
|---|---|---|
| lcms | = 1.18 | |
| openjdk | = 6 |
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free