Beveiligingsadvies

CVE-2008-5317

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-12-03 17:00:00
Laatst bijgewerkt 2024-08-07 10:49:12
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.