CVE-2008-5316: Buffer Overflow
Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5316?
CVE-2008-5316 is classified as a medium severity vulnerability that can lead to a buffer overflow.
How do I fix CVE-2008-5316?
To mitigate CVE-2008-5316, you should upgrade to a patched version of the Little CMS color engine, specifically version 1.16 or later.
What impact does CVE-2008-5316 have on affected systems?
CVE-2008-5316 may allow remote attackers to execute arbitrary code through a specially crafted input file.
Which versions of Little CMS are affected by CVE-2008-5316?
CVE-2008-5316 affects all versions of Little CMS prior to 1.16, including versions from 1.07 to 1.15.
How does CVE-2008-5316 exploit a vulnerability?
CVE-2008-5316 exploits a vulnerability by causing a buffer overflow through an inconsistency in length parameters during file processing.