| Package | Affected versions | Patched versions |
|---|---|---|
| lcms | = 1.07= 1.08= 1.09= 1.10= 1.11= 1.12= 1.13= 1.14≤ 1.15 | |
| little cms color engine | = 1.07= 1.08= 1.09= 1.10= 1.11= 1.12= 1.13= 1.14≤ 1.15 |
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free