Описание
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1.1 and below are vulnerable to Type Confusion in its CIccSingleSampledeCurveXml class during XML Curve Serialization. This issue is fixed in version 2.3.1.2.
Ссылки
- Patch
- ExploitIssue TrackingVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.3.1.2 (исключая)
cpe:2.3:a:color:iccdev:*:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.00011
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-188
EPSS
Процентиль: 1%
0.00011
Низкий
6.6 Medium
CVSS3
Дефекты
CWE-188