Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the liblcms-utils package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2013-4276

CVE-2013-4276 affects LittleCMS (lcms/liblcms) 1.19 and earlier. The vulnerability arises from multiple stack-based buffer overflows in the ColorSpace conversion calculator and the TIFF image comparison utility, enabling a remote attacker to trigger a crash (DoS) by inviting the user to process a...

CVE-2013-4276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in LittleCMS aka lcms or liblcms 1.19 and earlier allow remote attackers to cause a denial of service crash via a crafted 1 ICC color profile to the icctrans utility or 2 TIFF image to the tiffdiff utility...

SLES10: Security update for liblcms,liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for liblcms

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for liblcms, liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for liblcms

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES9: Security update for liblcms,liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021001...

SLES9: Security update for liblcms, liblcms-devel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021001...

SLES9: Security update for liblcms

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5045880...

SLES9: Security update for liblcms

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: liblcms liblcms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5045880...

SuSE 10 Security Update : liblcms (ZYPP Patch Number 6048)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code. CVE-2009-0723 / CVE-2009-0581 / CVE-2009-0733 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE9 Security Update : liblcms (YOU Patch Number 12361)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code. CVE-2009-0723, CVE-2009-0581, CVE-2009-0733 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

SuSE9 Security Update : liblcms,liblcms-devel (YOU Patch Number 11955)

Various security issues in liblcms have been found that occur while parsing ICC profiles in JPEG images. A remote attacker can exploit these bugs to execute arbitrary commands or cause denial-of-service by tricking the user to view a specially crafted JPEG image. This issue has been tracked by...

openSUSE Security Update : lcms (lcms-581)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CVE-2009-0793

CVE-2009-0793 affects LittleCMS (lcms) 1.18, specifically cmsxform.c handling transformations of monochrome profiles. The issue enables a remote attacker to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers incorrect code execution in mon...

CVE-2009-0793: Improper Input Validation

cmsxform.c in LittleCMS aka lcms or liblcms 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."...

openSUSE 10 Security Update : liblcms (liblcms-6049)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code CVE-2009-0723, CVE-2009-0581, CVE-2009-0733. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

CVE-2009-0723

CVE-2009-0723 affects LittleCMS (lcms/liblcms) before 1.18beta2. The vulnerability comprises multiple integer overflows that, when processing crafted image files, can trigger a heap-based buffer overflow. This issue is noted to be exploitable in contexts where LittleCMS is used (e.g., in Firefox ...

CVE-2009-0581

CVE-2009-0581 affects LittleCMS (liblcms) up to before 1.18beta2. The memory leak can be triggered by crafted image files and is used by Firefox 3.1beta, OpenJDK, and GIMP, potentially causing memory consumption and application crash (DoS). The connected documents corroborate the existence of thi...