Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.6.0-openjdk-demo | Dec 1, 2016 | Mar 23, 2009 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | Oct 30, 2017 | Mar 23, 2009 |
| Oracle_linux | — | Upgrade lcms-develUpgrade python-lcmsUpgrade lcms | Oct 16, 2024 | Mar 23, 2009 |
| Suse | — | Upgrade lcmsUpgrade python-lcmsUpgrade liblcms-develUpgrade liblcms1-32bitUpgrade liblcms-devel-32bitUpgrade liblcms1Upgrade liblcms1-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade python-liblcmsUpgrade liblcms1 | Nov 8, 2024 | Mar 23, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub