Vendor/product archive

littlecms / lcms CVEs

Beta · best-effort

4 CVEs tagged to littlecms / lcms — 3 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to littlecms vendor archive

CVE-2009-0793

Published Apr 9, 2009

cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and appli…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-5317

Published Dec 3, 2008

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file co…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2008-5316

Published Dec 3, 2008

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors relate…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2007-2741

Published May 17, 2007

Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC p…

CVSS 9.3 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1