Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openjdk8Upgrade lcms2 | Nov 9, 2018 | Sep 4, 2018 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Aug 28, 2019 | Sep 4, 2018 |
| Debian | — | Upgrade lcms2 | Sep 6, 2018 | Sep 3, 2018 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | May 28, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lcms2 | Feb 22, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lcms2 | Jan 20, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lcms2 | Nov 2, 2020 | Sep 4, 2018 |
| Redhat_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfoNo solution exists | Oct 25, 2018 | Sep 3, 2018 |
| Suse | — | Upgrade liblcms2-2-32bitUpgrade java-1_8_0-openjdk-demoUpgrade liblcms2-docUpgrade lcms2Upgrade java-1_8_0-openjdk-develUpgrade liblcms2-develUpgrade java-1_8_0-openjdk-accessibilityUpgrade liblcms2-devel-32bitUpgrade java-1_7_0-openjdk-develUpgrade java-1_8_0-openjdkUpgrade java-1_8_0-openjdk-srcUpgrade java-1_7_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_7_0-openjdk-headlessUpgrade liblcms2-2 | Oct 28, 2018 | Sep 3, 2018 |
| Ubuntu | — | Upgrade liblcms-utilsUpgrade liblcms2-utilsUpgrade liblcms2-2Upgrade liblcms1 | Oct 2, 2018 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub