LittleCMS: Multiple vulnerabilities

Background LittleCMS, or short lcms, is a color management system for working with ICC profiles. It is used by many applications including GIMP and Firefox. Description RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google...

lcms: Null pointer dereference (DoS) by handling transformations of monochrome profiles

cmsxform.c in LittleCMS aka lcms or liblcms 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."...

Fedora Core 10 FEDORA-2009-2903 (lcms)

The remote host is missing an update to lcms announced via advisory FEDORA-2009-2903. OpenVAS Vulnerability Test $Id: fcore20092903.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2903 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

[SECURITY] Fedora 9 Update: lcms-1.18-1.fc9

LittleCMS intends to be a small-footprint, speed optimized color management engine in open source form...

RedHat Security Advisory RHSA-2009:0339

The remote host is missing updates announced in advisory RHSA-2009:0339. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as...

Moderate: Red Hat Security Advisory: lcms security update

Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply "lcms" is a small-footprint,...

Libra PHP File Manager 1.18/2.0 - Local File Inclusion

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua =...

CVE-2004-2495

The 1 Webmail, 2 admin, and 3 SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service CPU consumption via a large number of simultaneous connections to the service...

Code-Crafters Ability Mail Server 1.18 - errormsg Cross-Site Scripting

Code-Crafters Ability Mail Server 1.18 - errormsg Cross-Site Scripting source: https://www.securityfocus.com/bid/10695/info Ability Mail Server is reported prone to multiple vulnerabilities that may allow a remote attacker to carry out cross-site scripting and denial of service attacks. The serve...

PT-2002-2634 · Skystream · Skystream Emr5000

Name of the Vulnerable Software and Affected Versions: SkyStream EMR5000 versions 1.16 through 1.18 Description: The issue allows remote attackers to cause a denial of service, resulting in a null pointer exception and kernel panic, by sending a large number of packets when the buffers are full...

CVE-2000-0587

The CVE-2000-0587 entry concerns glftpd 1.18, where the privpath directive permits remote attackers to bypass directory access restrictions by abusing filename completion. This constitutes a vulnerability in the directory traversal/access-control mechanism, allowing authorized-appearing access to...