critical9.8
CVE-2013-7455
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary…
Impact
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Littlecms | Little Cms Color Engine | Versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 |
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/369800
- http://www.ubuntu.com/usn/USN-2961-1
- https://github.com/mm2/Little-CMS/commit/fefaaa43c382eee632ea3ad0cfa915335140e1db
- https://penteston.com/OSVDB-105462
- http://www.kb.cert.org/vuls/id/369800
- http://www.ubuntu.com/usn/USN-2961-1
- https://github.com/mm2/Little-CMS/commit/fefaaa43c382eee632ea3ad0cfa915335140e1db
- https://penteston.com/OSVDB-105462