PT-2023-30390 · International Color Consortium · Demoiccmax
CVE-2023-47249
·
Publicado
2023-11-04
·
Atualizado
2023-11-14
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
International Color Consortium DemoIccMAX version 79ecb74
Description
The issue is related to an out-of-bounds read in the
CIccXmlArrayType::ParseText function for unsigned short in IccUtilXml.cpp within libIccXML.a.Recommendations
For International Color Consortium DemoIccMAX version 79ecb74, as a temporary workaround, consider disabling the
CIccXmlArrayType::ParseText function for unsigned short until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Demoiccmax