CVE-2009-0723

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

CVE-2009-0733

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for th...

CVE-2009-0581

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...

CVE-2009-0733

LittleCMS (lcms/liblcms) contains multiple stack-based buffer overflows in ReadSetOfCurves, affecting versions before 1.18beta2. The flaw allows context-dependent attackers to execute arbitrary code via a crafted image file with a large integer value for the input or output channel, tied to ReadL...

CVE-2009-0723

CVE-2009-0723 affects LittleCMS (lcms/liblcms) before 1.18beta2. The vulnerability comprises multiple integer overflows that, when processing crafted image files, can trigger a heap-based buffer overflow. This issue is noted to be exploitable in contexts where LittleCMS is used (e.g., in Firefox ...

CVE-2009-0581

CVE-2009-0581 affects LittleCMS (liblcms) up to before 1.18beta2. The memory leak can be triggered by crafted image files and is used by Firefox 3.1beta, OpenJDK, and GIMP, potentially causing memory consumption and application crash (DoS). The connected documents corroborate the existence of thi...

Ubuntu Update for LittleCMS vulnerability USN-693-1

Ubuntu Update for Linux kernel vulnerabilities USN-693-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6931.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for LittleCMS vulnerability USN-693-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

LittleCMS color management system library multiple security vulnerabilities

Buffer overflows, integer overflows, memory corruptions...

LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted)

Hi, LittleCMS or lcms prior to v1.18beta2 contains various integer overflow, buffer overflow and memory leak errors. At least one of these bugs is a stack-based buffer overflow which is good for arbitrary code execution. I have an exploit that works on my Ubuntu-8.10 laptop but am holding off on...

RedHat Security Advisory RHSA-2009:0339

The remote host is missing updates announced in advisory RHSA-2009:0339. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as...

LittleCms integer overflow

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

LittleCms lack of upper-bounds check on sizes

Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for th...

LittleCms memory leak

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...

lcms security update

1.18-beta1.1.el53.2 - Add patch theoretically preventing division by zero 1.18-beta1.1.el53.1 - Rebase to upstream 1.18beta1 - CVE-2009-0581 LittleCms memory leak - CVE-2009-0723 LittleCms integer overflow - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes - Resolves: 487513...

[USN-693-1] LittleCMS vulnerability

=========================================================== Ubuntu Security Notice USN-693-1 December 17, 2008 LittleCMS vulnerability CVE-2008-5317 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 Ubuntu 8.04 LTS Ubun...

USN-693-1: LittleCMS vulnerability

It was discovered that certain gamma operations in lcms were not correctly bounds-checked. If a user or automated system were tricked into processing a malicious image, a remote attacker could crash applications linked against liblcms1, leading to a denial of service, or possibly execute arbitrar...

PT-2009-6703 · Little Cms +1 · Liblcms1 +5

Name of the Vulnerable Software and Affected Versions: liblcms1 versions prior to 1.18 liblcms1-dev versions prior to 1.18 lcms versions prior to 1.18 lcms-devel versions prior to 1.18 lcms-utils versions prior to 1.18 Description: The issue involves multiple integer overflows in LittleCMS, which...