Lucene search

K
nvd[email protected]NVD:CVE-2013-4276
HistorySep 28, 2013 - 7:55 p.m.

CVE-2013-4276

2013-09-2819:55:03
CWE-119
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.9%

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

Affected configurations

NVD
Node
littlecmslittle_cms_color_engineRange1.19
OR
littlecmslittle_cms_color_engineMatch1.07
OR
littlecmslittle_cms_color_engineMatch1.08
OR
littlecmslittle_cms_color_engineMatch1.09
OR
littlecmslittle_cms_color_engineMatch1.10
OR
littlecmslittle_cms_color_engineMatch1.11
OR
littlecmslittle_cms_color_engineMatch1.12
OR
littlecmslittle_cms_color_engineMatch1.13
OR
littlecmslittle_cms_color_engineMatch1.14
OR
littlecmslittle_cms_color_engineMatch1.15
OR
littlecmslittle_cms_color_engineMatch1.16
OR
littlecmslittle_cms_color_engineMatch1.17
OR
littlecmslittle_cms_color_engineMatch1.18

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.9%