CVEvulnerability

CVE-2012-1616

9.3 HIGH Published 2012-06-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399

Description

Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.

Affected configurations

• argyllcms argyllcms (<= 1.3.7) • argyllcms argyllcms 0.1.0 • argyllcms argyllcms 0.2.0 • argyllcms argyllcms 0.2.1 • argyllcms argyllcms 0.2.2 • argyllcms argyllcms 0.3.0 • argyllcms argyllcms 0.6.0 • argyllcms argyllcms 0.7.0 • argyllcms argyllcms 1.0.0 • argyllcms argyllcms 1.0.2 • argyllcms argyllcms 1.0.3 • argyllcms argyllcms 1.0.4 • argyllcms argyllcms 1.1.0 • argyllcms argyllcms 1.1.1 • argyllcms argyllcms 1.2.0 • argyllcms argyllcms 1.3.0 • argyllcms argyllcms 1.3.1 • argyllcms argyllcms 1.3.2 • argyllcms argyllcms 1.3.3 • argyllcms argyllcms 1.3.4 • argyllcms argyllcms 1.3.5 • argyllcms argyllcms 1.3.6 • color icclib (<= 2.11) • color icclib 1.23 • color icclib 2.00 • color icclib 2.02 • color icclib 2.03

Related

Weakness · not in database (1)

References