| Package | Affected versions | Patched versions |
|---|---|---|
| little cms color engine | = 2.9 |
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free