CVE-2013-7455
CVE-2013-7455
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
CVSS 9.8 · Critical · EPSS 6.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
lcms2 Debian:12
- Affected ranges
- ECOSYSTEM: < 2.6-1
Update to 2.6-1
lcms2 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.6-1
Update to 2.6-1
lcms2 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.6-1
Update to 2.6-1
lcms2 Ubuntu:14.04:LTS
- Versions
- 2.5-0ubuntu1
- 2.5-0ubuntu2
- 2.5-0ubuntu3
- 2.5-0ubuntu4
- Affected ranges
- ECOSYSTEM: < 2.5-0ubuntu4.1
Update to 2.5-0ubuntu4.1