CVEvulnerability

CVE-2008-5316

10.0 HIGH Published 2008-12-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.

Affected configurations

• littlecms lcms (<= 1.15) • littlecms lcms 1.07 • littlecms lcms 1.08 • littlecms lcms 1.09 • littlecms lcms 1.10 • littlecms lcms 1.11 • littlecms lcms 1.12 • littlecms lcms 1.13 • littlecms lcms 1.14 • littlecms little cms color engine (<= 1.15) • littlecms little cms color engine 1.07 • littlecms little cms color engine 1.08 • littlecms little cms color engine 1.09 • littlecms little cms color engine 1.10 • littlecms little cms color engine 1.11 • littlecms little cms color engine 1.12 • littlecms little cms color engine 1.13 • littlecms little cms color engine 1.14

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References