CVE-2008-5316
Fixed in a distro release EPSS 3%
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.
Products: littlecms lcms, littlecms little_cms_color_engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | lcms | 1.15-1.1+etch1 |
| Red Hat Enterprise Linux 5 | lcms | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | lcms-debuginfo | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | lcms-devel | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | python-lcms | 0:1.15-1.2.2.el5_2.2 |