Lucene search

K
cve[email protected]CVE-2012-1616
HistoryJun 21, 2012 - 3:55 p.m.

CVE-2012-1616

2012-06-2115:55:12
CWE-399
web.nvd.nist.gov
38
cve-2012-1616
vulnerability
icclib
argyll cms
denial of service
execute arbitrary code
icc profile file
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%

Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.

Affected configurations

NVD
Node
argyllcmsargyllcmsRange1.3.7
OR
argyllcmsargyllcmsMatch0.1.0
OR
argyllcmsargyllcmsMatch0.2.0
OR
argyllcmsargyllcmsMatch0.2.1
OR
argyllcmsargyllcmsMatch0.2.2
OR
argyllcmsargyllcmsMatch0.3.0
OR
argyllcmsargyllcmsMatch0.6.0
OR
argyllcmsargyllcmsMatch0.7.0beta_8
OR
argyllcmsargyllcmsMatch1.0.0
OR
argyllcmsargyllcmsMatch1.0.2
OR
argyllcmsargyllcmsMatch1.0.3
OR
argyllcmsargyllcmsMatch1.0.4
OR
argyllcmsargyllcmsMatch1.1.0
OR
argyllcmsargyllcmsMatch1.1.1
OR
argyllcmsargyllcmsMatch1.2.0
OR
argyllcmsargyllcmsMatch1.3.0
OR
argyllcmsargyllcmsMatch1.3.1
OR
argyllcmsargyllcmsMatch1.3.2
OR
argyllcmsargyllcmsMatch1.3.3
OR
argyllcmsargyllcmsMatch1.3.4
OR
argyllcmsargyllcmsMatch1.3.5
OR
argyllcmsargyllcmsMatch1.3.6
OR
coloricclibRange2.11
OR
coloricclibMatch1.23
OR
coloricclibMatch2.00
OR
coloricclibMatch2.02
OR
coloricclibMatch2.03

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.044 Low

EPSS

Percentile

92.5%