CVE-2009-0723

CVE-2009-0723 affects LittleCMS (lcms/liblcms) before 1.18beta2. The vulnerability comprises multiple integer overflows that, when processing crafted image files, can trigger a heap-based buffer overflow. This issue is noted to be exploitable in contexts where LittleCMS is used (e.g., in Firefox ...

CVE-2009-0733

LittleCMS (lcms/liblcms) contains multiple stack-based buffer overflows in ReadSetOfCurves, affecting versions before 1.18beta2. The flaw allows context-dependent attackers to execute arbitrary code via a crafted image file with a large integer value for the input or output channel, tied to ReadL...