PT-2012-3384 · Icclib+1 · Icclib+1

Marc Schoenefeld · Publicado 2012-06-21 · Atualizado 2024-06-15 · CVE-2012-1616

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions icclib versions prior to 2.13 Argyll CMS versions prior to 1.4

Description The issue is related to a use-after-free vulnerability that can be triggered by a crafted ICC profile file, potentially allowing remote attackers to cause a denial of service or execute arbitrary code.

Recommendations For icclib versions prior to 2.13, update to version 2.13 or later. For Argyll CMS versions prior to 1.4, update to version 1.4 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2012-1616

OPENSUSE-SU-2024:10284-1

Produtos afetados

Argyll Cms

Icclib

Referências · 19

• https://bugzilla.redhat.com/show_bug.cgi?id=809697 · Nota
• https://cve.org/CVERecord?id=CVE-2012-1616 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-1616 · Nota de Segurança
• http://osvdb.org/81617 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-1616 · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/75162 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10284-1 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1616 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201206-04.xml · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-1616 · Nota
• https://osv.dev/vulnerability/CVE-2012-1616 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-1616 · Aviso do Fabricante
• http://securityfocus.com/bid/53240 · Nota
• https://ubuntu.com/security/CVE-2012-1616 · Aviso do Fabricante