PT-2013-1268 · Little Cms+1 · Little Cms+2

Pedro Ribeiro · Publicado 2013-08-26 · Atualizado 2024-06-15 · CVE-2013-4276

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions LittleCMS versions 1.19 and earlier lcms versions prior to 2.6-r1

Description The issue concerns multiple stack-based buffer overflows in LittleCMS, allowing remote attackers to cause a denial of service via crafted files, such as ICC color profiles or TIFF images. This can lead to a crash of the system, disrupting the availability of protected information. The exploitation of these issues can be done remotely.

Recommendations For LittleCMS versions 1.19 and earlier: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For lcms versions prior to 2.6-r1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09774

CVE-2013-4276

MGASA-2013-0260

OPENSUSE-SU-2024:10340-1

SUSE-SU-2013_1743-1

Produtos afetados

Little Cms

Suse

Lcms

Referências · 25

• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• http://support.novell.com/security/cve/CVE-2013-4276.html · Nota
• https://osv.dev/vulnerability/MGASA-2013-0260 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=991757 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=992975 · Correção
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4276 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/08/22/3 · Correção
• https://advisories.mageia.org/MGASA-2013-0260.html · Nota de Segurança
• http://security.gentoo.org/glsa/glsa-201412-46.xml · Nota
• https://suse.com/security/cve/CVE-2013-4276 · Nota
• https://suse.com/security/cve/CVE-2009-0793 · Nota
• https://bugzilla.novell.com/843716 · Nota
• http://openwall.com/lists/oss-security/2013/08/21/19 · Nota
• https://bdu.fstec.ru/vul/2015-09774 · Nota de Segurança
• http://download.novell.com/patch/finder/?keywords=ce49f7acdd5a778cb113f184b73ce701 · Nota