The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-srcUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadoc | Dec 1, 2016 | Mar 23, 2009 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | Oct 30, 2017 | Mar 23, 2009 |
| Oracle_linux | — | Upgrade lcmsUpgrade python-lcmsUpgrade lcms-devel | Oct 16, 2024 | Mar 23, 2009 |
| Suse | — | Upgrade python-lcmsUpgrade lcmsUpgrade liblcms-develUpgrade liblcms1-32bitUpgrade liblcms1Upgrade liblcms-devel-32bitUpgrade liblcms1-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade liblcms1Upgrade python-liblcms | Nov 8, 2024 | Mar 23, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub