PT-2018-10664 · Little Cms+1 · Little Cms+1

Xiaoqx · Published 2018-05-30 · Updated 2024-08-05 · CVE-2018-11556

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Little CMS version 2.9

Description The issue is related to an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a, which can be triggered via a crafted TIFF file. However, the Little CMS developers do not consider this a vulnerability in the lcms2 library itself, as it depends on LIBTIFF only for building sample programs and the issue cannot be reproduced on the lcms2 library.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2020-2055

CVE-2018-11556

Affected Products

Alt Linux

Little Cms

References · 11

• 🔥 https://github.com/xiaoqx/pocs/tree/master/cms · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11555 · Security Note
• https://errata.altlinux.org/ALT-PU-2020-2055 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-11556 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00426 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-11556 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11556 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16435 · Security Note
• https://github.com/mm2/Little-CMS/issues/171 · Note
• https://github.com/mm2/Little-CMS/issues/167 · Note
• https://packages.altlinux.org/ru/vuln/CVE-2018-11556 · Note