Описание
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | released | 1.18.dfsg-1.2ubuntu1 |
| gutsy | ignored | end of life, was needs-triage |
| hardy | released | 1.16-7ubuntu1.3 |
| intrepid | ignored | end of life |
| jaunty | ignored | end of life |
| karmic | released | 1.18.dfsg-1ubuntu1.1 |
| lucid | released | 1.18.dfsg-1ubuntu2.10.04.1 |
| maverick | released | 1.18.dfsg-1ubuntu2.10.10.1 |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 6b16-1.6.1-0ubuntu1 |
| gutsy | DNE | |
| hardy | released | 6b18-1.8.2-4ubuntu1~8.04.1 |
| intrepid | ignored | end of life |
| jaunty | ignored | end of life |
| karmic | not-affected | 6b16-1.6.1-0ubuntu1 |
| lucid | not-affected | 6b16-1.6.1-0ubuntu1 |
| maverick | not-affected | 6b16-1.6.1-0ubuntu1 |
| upstream | released | 6b16-1 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK ...
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted image that triggers execution of incorrect code for "transformations of monochrome profiles."
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
EPSS
4.3 Medium
CVSS2