Mandrake Security Advisory MDVSA-2009:137 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:137. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2009:137)

Multiple security vulnerabilities has been identified and fixed in Little cms library embedded in OpenJDK : A memory leak flaw allows remote attackers to cause a denial of service memory consumption and application crash via a crafted image file CVE-2009-0581. Multiple integer overflows allow...

Mandrake Security Advisory MDVSA-2009:121 (lcms)

The remote host is missing an update to lcms announced via advisory MDVSA-2009:121. OpenVAS Vulnerability Test $Id: mdksa2009121.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:121 lcms Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:121 (lcms)

The remote host is missing an update to lcms announced via advisory MDVSA-2009:121. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Little CMS内存泄露及整数溢出漏洞

BUGTRAQ ID: 34185 CVECAN ID: CVE-2009-0581,CVE-2009-0733,CVE-2009-0723 Little cms是一款小型的开源颜色管理引擎。 LittleCMS中存在多个可导致堆溢出的整数溢出漏洞和多个不充分输入验证错误。攻击者可以利用这些漏洞创建特制的图形文件，如果受害用户打开了该文件，就会导致使用LittleCMS的应用崩溃或执行任意代码。 LittleCMS中存在内存泄露漏洞。如果使用LittleCMS的应用打开了特制图形，就会使用过多的内存，在耗尽所有可用内存后会崩溃。 Little CMS 1.18 厂商补丁： RedHat...

lcms: unsigned -> signed integer cast issue in cmsAllocGamma

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

lcms: insufficient input validation in ReadEmbeddedTextTag

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

Buffer overflow

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

Integer overflow

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

CVE-2008-5316

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine aka lcms before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than...

CVE-2008-5316

CVE-2008-5316 affects the LittleCMS color engine (lcms) prior to version 1.16. A buffer overflow is triggered in the ReadEmbeddedTextTag function (cmsio1.c) due to a length parameter inconsistency involving the input file. The impact is described as unknown in the provided document, and no exploi...

[ MDKSA-2007:238 ] - Updated liblcms package fixes buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:238 http://www.mandriva.com/security/ Package : liblcms Date : December 6, 2007 Affected: Corporate 3.0, Corporate 4.0 Problem Description: Stack-based buffer overflow in Little CMS lcms before 1.15 allows...

CVE-2007-2741

Stack-based buffer overflow in Little CMS lcms before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ICC profile in a JPG file...

Stack overflow

Stack-based buffer overflow in Little CMS lcms before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ICC profile in a JPG file...

CVE-2007-2741

Stack-based buffer overflow in Little CMS lcms before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ICC profile in a JPG file...

CVE-2007-2741

Stack-based buffer overflow in Little CMS lcms before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted ICC profile in a JPG file...

CVE-2007-2741

CVE-2007-2741 attests a stack-based buffer overflow in Little CMS (lcms) prior to 1.15. A crafted ICC profile embedded in a JPG can trigger remote code execution or cause an application crash/DoS. Affected software is Little CMS; root cause is a overflow in handling ICC profiles in JPEG input. Th...

PT-2009-6704 · Little Cms +1 · Liblcms1 +5

Name of the Vulnerable Software and Affected Versions: lcms versions prior to 1.18beta2 liblcms1-dev versions prior to 1.18 liblcms1 versions prior to 1.18 liblcms-utils versions prior to 1.18 lcms-devel-1.18 versions prior to 1.18 Description: The issue involves multiple stack-based buffer...