CVE-2008-5317
Fixed in a distro release EPSS 2%
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.
Products: littlecms lcms, littlecms little_cms_color_engine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | lcms | 1.15-1.1+etch1 |
| Red Hat Enterprise Linux 5 | lcms | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | lcms-debuginfo | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | lcms-devel | 0:1.15-1.2.2.el5_2.2 |
| Red Hat Enterprise Linux 5 | python-lcms | 0:1.15-1.2.2.el5_2.2 |