PT-2009-6704 · Little Cms+1 · Lcms-Devel-1.18+5

Chris Evans · Published 1970-01-01 · Updated 2024-11-19 · CVE-2009-0733

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lcms versions prior to 1.18beta2 liblcms1-dev versions prior to 1.18 liblcms1 versions prior to 1.18 liblcms-utils versions prior to 1.18 lcms-devel-1.18 versions prior to 1.18

Description The issue involves multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS, which can be exploited to execute arbitrary code via a crafted image file associated with a large integer value for the input or output channel. This is related to the ReadLUT A2B and ReadLUT B2A functions. The exploitation can lead to a violation of confidentiality, integrity, and availability of protected information and can be performed remotely.

Recommendations For lcms versions prior to 1.18beta2, update to version 1.18beta2 or later. For liblcms1-dev versions prior to 1.18, update to version 1.18 or later. For liblcms1 versions prior to 1.18, update to version 1.18 or later. For liblcms-utils versions prior to 1.18, update to version 1.18 or later. For lcms-devel-1.18 versions prior to 1.18, update to version 1.18 or later.

Exploit

Fix

Memory Corruption

Memory Leak

Weakness Enumeration

CWE-787

CWE-401

Related Identifiers

BDU:2015-03025

BDU:2015-03026

BDU:2015-03027

BDU:2015-06297

BDU:2015-06299

BDU:2015-09381

CVE-2009-0733

DSA-1745-1

DSA-1769-1

RHSA-2009:0339

RHSA-2009:0377

RHSA-2009_0339

RHSA-2009_0377

Affected Products

Red Hat

Lcms

Lcms-Devel-1.18

Liblcms-Utils

Liblcms1

Liblcms1-Dev

References · 71

• 🔥 http://scarybeastsecurity.blogspot.com/2009/03/littlecms-vulnerabilities.html · Exploit
• 🔥 http://scary.beasts.org/security/CESA-2009-003.html · Exploit
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00811.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2009-0377.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00856.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0723 · Security Note
• https://bdu.fstec.ru/vul/2015-06299 · Security Note
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.487438 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0581 · Security Note
• https://bdu.fstec.ru/vul/2015-03027 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-March/msg00799.html · Vendor Advisory
• http://debian.org/security/2009/dsa-1745 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2009:121 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03026 · Security Note