CVE-2013-7455
Ubuntu Security Notice USN-2961-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Vulnerabilidad de liberación doble de memoria en la función DefaultICCintents en cmscnvrt.c en liblcms2 en Little CMS 2.x en versiones anteriores a 2.6 permite a atacantes remotos ejecutar código arbitrario a través de un perfil ICC mal formado que desencadena un error en el manejador de intent por defecto.
It was discovered that a double free() could occur when the intent handling code in the Little CMS library detected an error. An attacker could use this to specially craft a file that caused an application using the Little CMS library to crash or possibly execute arbitrary code.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-05-02 CVE Reserved
- 2016-05-05 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/369800 | Third Party Advisory |
|
| https://github.com/mm2/Little-CMS/commit/fefaaa43c382eee632ea3ad0cfa915335140e1db | X_refsource_confirm | |
| https://penteston.com/OSVDB-105462 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.ubuntu.com/usn/USN-2961-1 | 2016-12-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.0 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.0" | - |
Affected
| ||||||
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.1 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.1" | - |
Affected
| ||||||
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.2 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.2" | - |
Affected
| ||||||
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.3 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.3" | - |
Affected
| ||||||
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.4 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.4" | - |
Affected
| ||||||
| Littlecms Search vendor "Littlecms" | Little Cms Color Engine Search vendor "Littlecms" for product "Little Cms Color Engine" | 2.5 Search vendor "Littlecms" for product "Little Cms Color Engine" and version "2.5" | - |
Affected
| ||||||