Summary
Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2016-10165)
Quang Nguyen discovered that Little CMS incorrectly handled certain files.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2018-16435)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | lcms2 | 2.5-0ubuntu4.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | lcms2 | 2.6-3ubuntu2.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | lcms2 | 2.9-1ubuntu0.1 |
Vulnerabilities 2
-
Unscored —
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive informat…
-
Unscored —
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats…