[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2016-10165Date: (C)2017-02-07   (M)2024-03-22


The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.1CVSS Score : 5.8
Exploit Score: 1.8Exploit Score: 8.6
Impact Score: 5.2Impact Score: 4.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: REQUIREDConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: HIGHAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
SECTRACK-1039596
BID-95808
DSA-3774
RHSA-2016:2079
RHSA-2016:2658
RHSA-2017:2999
RHSA-2017:3046
RHSA-2017:3264
RHSA-2017:3267
RHSA-2017:3268
RHSA-2017:3453
USN-3770-1
USN-3770-2
http://www.openwall.com/lists/oss-security/2017/01/23/1
http://www.openwall.com/lists/oss-security/2017/01/25/14
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2
https://security.netapp.com/advisory/ntap-20171019-0001/
openSUSE-SU-2017:0336

CWE    1
CWE-125
OVAL    33
oval:org.secpod.oval:def:602757
oval:org.secpod.oval:def:90225
oval:org.secpod.oval:def:204037
oval:org.secpod.oval:def:501884
...

© SecPod Technologies