Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Little CMS ICC配置文件远程栈溢出漏洞
Vulnerability Description
Little CMS(又名lcms或liblcms)是软件开发者Marti Maria所研发的一套开源的色彩管理系统。该系统提供黑点补偿、多种像素格式处理、配置文件编辑等功能。 Little cms在解析ICC配置文件时存在栈溢出漏洞,远程攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户机器。 如果用户受骗打开了设置有特制ICC配置文件的.JPG文件的话,就可能触发这个溢出,导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A