PT-2016-3480
CVE-2013-7455
·
تاريخ النشر
2014-05-07
·
تاريخ التحديث
2016-12-01
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Little CMS versions prior to 2.6
Description
A double free vulnerability exists in the DefaultICCintents function in cmscnvrt.c in liblcms2. This issue can be triggered by a malformed ICC profile, allowing remote attackers to execute arbitrary code via an error in the default intent handler.
Recommendations
For versions prior to 2.6, update to version 2.6 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾