Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5316
HistoryDec 03, 2008 - 12:00 a.m.

CVE-2008-5316

2008-12-0300:00:00
ubuntu.com
ubuntu.com
4

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.2%

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in
Little cms color engine (aka lcms) before 1.16 allows attackers to have an
unknown impact via vectors related to a length parameter inconsistency
involving the contents of “the input file,” a different vulnerability than
CVE-2007-2741.

Notes

Author Note
kees this was included in the USN that addressed CVE-2007-2741.
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlcms< 1.13-1ubuntu0.1UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.2%