Description
Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.
References
- 36179 vdb-entry
- ADV-2007-1837 vdb-entry
- 32282 third-party-advisory
- USN-652-1 vendor-advisory
- littlecms-iccprofile-bo(34331) vdb-entry
- 27756 third-party-advisory
- http://scary.beasts.org/security/CESA-2007-001.html
- SUSE-SR:2007:024 vendor-advisory
- 25294 third-party-advisory
- MDKSA-2007:238 vendor-advisory
- 24001 vdb-entry