| Package | Affected versions | Patched versions |
|---|---|---|
| gimp | < 2.9.2 | 2.9.2 |
| little cms | ≤ 1.17 | |
| firefox | = 3.1 | |
| openjdk | ≤ 7 |
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free