Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade lcms2Upgrade openjdk8 | Nov 9, 2018 | Sep 4, 2018 |
| Centos_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Aug 28, 2019 | Sep 4, 2018 |
| Debian | — | Upgrade lcms2 | Sep 6, 2018 | Sep 3, 2018 |
| Gentoo Linux | — | Upgrade media-libs/lcms. | May 28, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade lcms2 | Feb 22, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade lcms2 | Jan 20, 2021 | Sep 4, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade lcms2 | Nov 2, 2020 | Sep 4, 2018 |
| Redhat_linux | — | Upgrade chromium-browserNo solution existsUpgrade chromium-browser-debuginfo | Oct 25, 2018 | Sep 3, 2018 |
| Suse | — | Upgrade java-1_7_0-openjdk-headlessUpgrade java-1_8_0-openjdk-srcUpgrade java-1_8_0-openjdk-javadocUpgrade java-1_8_0-openjdk-headlessUpgrade java-1_8_0-openjdkUpgrade java-1_7_0-openjdk-demoUpgrade java-1_7_0-openjdkUpgrade liblcms2-2Upgrade java-1_7_0-openjdk-develUpgrade liblcms2-devel-32bitUpgrade java-1_8_0-openjdk-demoUpgrade java-1_8_0-openjdk-accessibilityUpgrade lcms2Upgrade liblcms2-docUpgrade java-1_8_0-openjdk-develUpgrade liblcms2-develUpgrade liblcms2-2-32bit | Oct 28, 2018 | Sep 3, 2018 |
| Ubuntu | — | Upgrade liblcms2-2Upgrade liblcms1Upgrade liblcms2-utilsUpgrade liblcms-utils | Oct 2, 2018 | Sep 3, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub