CVE-2008-5316

2008-12-0317:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-5316

buffer overflow

little cms color engine

lcms

nvd

cve

9.2 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.2%

JSON

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of “the input file,” a different vulnerability than CVE-2007-2741.

CPENameOperatorVersion
littlecms:lcmslittlecms lcmseq1.08
littlecms:little_cms_color_enginelittlecms little cms color engineeq1.12
littlecms:lcmslittlecms lcmseq1.14
littlecms:little_cms_color_enginelittlecms little cms color engineeq1.13
littlecms:little_cms_color_enginelittlecms little cms color engineeq1.11
littlecms:little_cms_color_enginelittlecms little cms color engineeq1.08
littlecms:lcmslittlecms lcmseq1.07
littlecms:little_cms_color_enginelittlecms little cms color engineeq1.10
littlecms:little_cms_color_enginelittlecms little cms color enginele1.15
littlecms:lcmslittlecms lcmsle1.15

CPE	Name	Operator	Version
littlecms:lcms	littlecms lcms	eq	1.08
littlecms:little_cms_color_engine	littlecms little cms color engine	eq	1.12
littlecms:lcms	littlecms lcms	eq	1.14
littlecms:little_cms_color_engine	littlecms little cms color engine	eq	1.13
littlecms:little_cms_color_engine	littlecms little cms color engine	eq	1.11
littlecms:little_cms_color_engine	littlecms little cms color engine	eq	1.08
littlecms:lcms	littlecms lcms	eq	1.07
littlecms:little_cms_color_engine	littlecms little cms color engine	eq	1.10
littlecms:little_cms_color_engine	littlecms little cms color engine	le	1.15
littlecms:lcms	littlecms lcms	le	1.15