CVE-2013-7455

概要

参考情報

• kb.cert.org/vuls/id/369800 · Third Party Advisory
• ubuntu.com/usn/USN-2961-1
• mm2/Little-CMS commit fefaaa4
• penteston.com/OSVDB-105462

little cms color engine のその他の脆弱性

• CVE-2018-16435中 5.5Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap…
• CVE-2016-10165高 7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial…
• CVE-2013-4160中 5.0Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL …
• CVE-2013-4276中 4.3Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of servic…
• CVE-2008-5317緊急 10.0Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers …