Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to the lcms2 library, lcms2 does not depends on LIBTIFF other than to build sample programs, and the issue cannot be reproduced on the lcms2 library.”
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Little CMS tificc 缓冲区错误漏洞
Vulnerability Description
Little CMS（lcms或liblcms）是Marti Maria软件开发者的一套开源的色彩管理系统。该系统提供黑点补偿、多种像素格式处理、配置文件编辑等功能。tificc是其中的一个ICC配置文件应用程序。 Little CMS 2.9版本中的tificc的cmslut.c文件的‘cmsPipelineCheckAndRetreiveStages’函数存在缓冲区错误漏洞。攻击者可借助特制的TIFF文件利用该漏洞造成段错误（越界写入）。
CVSS Information
N/A
Vulnerability Type
N/A