Little CMS vulnerability

2013-07-2900:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.024 Low

EPSS

Percentile

89.7%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

lcms2 - Little CMS 2 color management library

Details

It was discovered that Little CMS did not properly verify certain memory
allocations. If a user or automated system using Little CMS were tricked
into opening a specially crafted file, an attacker could cause Little CMS
to crash.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchliblcms2-2< 2.4-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblcms2-dev< 2.4-0ubuntu3.1UNKNOWN
Ubuntu13.04noarchliblcms2-utils< 2.4-0ubuntu3.1UNKNOWN
Ubuntu12.10noarchliblcms2-2< 2.2+git20110628-2ubuntu4.1UNKNOWN
Ubuntu12.10noarchliblcms2-dev< 2.2+git20110628-2ubuntu4.1UNKNOWN
Ubuntu12.10noarchliblcms2-utils< 2.2+git20110628-2ubuntu4.1UNKNOWN
Ubuntu12.04noarchliblcms2-2< 2.2+git20110628-2ubuntu3.1UNKNOWN
Ubuntu12.04noarchliblcms2-dev< 2.2+git20110628-2ubuntu3.1UNKNOWN
Ubuntu12.04noarchliblcms2-utils< 2.2+git20110628-2ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	liblcms2-2	< 2.4-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblcms2-dev	< 2.4-0ubuntu3.1	UNKNOWN
Ubuntu	13.04	noarch	liblcms2-utils	< 2.4-0ubuntu3.1	UNKNOWN
Ubuntu	12.10	noarch	liblcms2-2	< 2.2+git20110628-2ubuntu4.1	UNKNOWN
Ubuntu	12.10	noarch	liblcms2-dev	< 2.2+git20110628-2ubuntu4.1	UNKNOWN
Ubuntu	12.10	noarch	liblcms2-utils	< 2.2+git20110628-2ubuntu4.1	UNKNOWN
Ubuntu	12.04	noarch	liblcms2-2	< 2.2+git20110628-2ubuntu3.1	UNKNOWN
Ubuntu	12.04	noarch	liblcms2-dev	< 2.2+git20110628-2ubuntu3.1	UNKNOWN
Ubuntu	12.04	noarch	liblcms2-utils	< 2.2+git20110628-2ubuntu3.1	UNKNOWN