CVE-2008-5317

2008-12-03T17:30:00
ID CVE-2008-5317
Type cve
Reporter cve@mitre.org
Modified 2018-10-03T21:56:00

Description

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.