DSA-4284: -1 lcms2 -- security update

Published Sep 4, 2018

Updated

lcms2 - security update

Other sources

Quang Nguyen discovered an integer overflow in the Little CMS 2 colour management library, which could result in denial of service and potentially the execution of arbitrary code if a malformed IT8 calibration file is processed.

Affected Software

2 affected components

debian/lcms2

Event History

Sep 4, 2018

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-16435

Frequently Asked Questions

What input must be processed for this issue to be exploited?

The vulnerable condition is triggered when Little CMS 2 processes a malformed IT8 calibration file.

What is the potential impact of processing a malicious IT8 file?

The integer overflow could cause a denial of service and may potentially allow execution of arbitrary code.

DSA-4284: -1 lcms2 -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What input must be processed for this issue to be exploited?

What is the potential impact of processing a malicious IT8 file?

Company

Resources

Contact

Frequently Asked Questions

What input must be processed for this issue to be exploited?

What is the potential impact of processing a malicious IT8 file?