PT-2009-6703 · Little Cms+1 · Lcms+5

Chris Evans · Published 1970-01-01 · Updated 2024-11-19 · CVE-2009-0723

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions liblcms1 versions prior to 1.18 liblcms1-dev versions prior to 1.18 lcms versions prior to 1.18 lcms-devel versions prior to 1.18 lcms-utils versions prior to 1.18

Description The issue involves multiple integer overflows in LittleCMS, which can be exploited by context-dependent attackers to execute arbitrary code via a crafted image file, leading to a heap-based buffer overflow. This can result in the disruption of confidentiality, integrity, and availability of protected information. The exploitation of these vulnerabilities can be carried out remotely.

Recommendations For liblcms1 versions prior to 1.18, update to version 1.18 or later. For liblcms1-dev versions prior to 1.18, update to version 1.18 or later. For lcms versions prior to 1.18, update to version 1.18 or later. For lcms-devel versions prior to 1.18, update to version 1.18 or later. For lcms-utils versions prior to 1.18, update to version 1.18 or later. As a temporary workaround, consider avoiding the use of crafted image files that could trigger a heap-based buffer overflow until a patch is available.

Exploit

Fix

Integer Overflow

Memory Leak

Weakness Enumeration

CWE-190

CWE-401

Related Identifiers

BDU:2015-03025

BDU:2015-03026

BDU:2015-03027

BDU:2015-06297

BDU:2015-06299

BDU:2015-09381

CVE-2009-0723

DSA-1745-1

DSA-1769-1

RHSA-2009:0339

RHSA-2009:0377

RHSA-2009_0339

RHSA-2009_0377

Affected Products

Red Hat

Lcms

Lcms-Devel

Lcms-Utils

Liblcms1

Liblcms1-Dev

References · 71

• 🔥 http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html · Exploit
• 🔥 http://scary.beasts.org/security/CESA-2009-003.html · Exploit
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00811.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-0377.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00856.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0723 · Security Note
• https://bdu.fstec.ru/vul/2015-06299 · Security Note
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0581 · Security Note
• https://bdu.fstec.ru/vul/2015-03027 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00799.html · Vendor Advisory
• http://debian.org/security/2009/dsa-1745 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:121 · Vendor Advisory
• http://securityfocus.com/bid/34185 · Patch