Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4160
HistoryJan 21, 2014 - 6:55 p.m.

CVE-2013-4160

2014-01-2118:55:09
[email protected]
web.nvd.nist.gov

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.024

Percentile

89.8%

JSON

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.

Affected configurations

NVD
Node
littlecmslittle_cms_color_engineRange≤2.4
OR
littlecmslittle_cms_color_engineMatch1.07
OR
littlecmslittle_cms_color_engineMatch1.08
OR
littlecmslittle_cms_color_engineMatch1.09
OR
littlecmslittle_cms_color_engineMatch1.10
OR
littlecmslittle_cms_color_engineMatch1.11
OR
littlecmslittle_cms_color_engineMatch1.12
OR
littlecmslittle_cms_color_engineMatch1.13
OR
littlecmslittle_cms_color_engineMatch1.14
OR
littlecmslittle_cms_color_engineMatch1.15
OR
littlecmslittle_cms_color_engineMatch1.16
OR
littlecmslittle_cms_color_engineMatch1.17
OR
littlecmslittle_cms_color_engineMatch1.18
OR
littlecmslittle_cms_color_engineMatch1.19
OR
littlecmslittle_cms_color_engineMatch2.0
OR
littlecmslittle_cms_color_engineMatch2.1
OR
littlecmslittle_cms_color_engineMatch2.2
OR
littlecmslittle_cms_color_engineMatch2.3

Related

openvas 5
ubuntucve 1
securityvulns 5
prion 1
ubuntu 2
freebsd 1
nessus 4
cve 1
mageia 1
debiancve 1
cvelist 1
openvas
openvas
Ubuntu Update for lcms2 USN-1911-1
2013-08-08 00:00:00
Ubuntu: Security Advisory (USN-1911-1)
2013-08-08 00:00:00
Mageia: Security Advisory (MGASA-2013-0240)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2013-4160
2013-07-22 00:00:00
securityvulns
securityvulns
[USN-1911-1] Little CMS vulnerability
2013-07-29 00:00:00
Little CMS library DoS
2013-07-29 00:00:00
[USN-1911-1] Little CMS vulnerability
2013-07-29 00:00:00
prion
prion
Null pointer dereference
2014-01-21 18:55:00
ubuntu
ubuntu
Ghostscript vulnerability
2013-07-31 00:00:00
Little CMS vulnerability
2013-07-29 00:00:00
freebsd
freebsd
lcms2 -- Null Pointer Dereference Denial of Service Vulnerability
2013-07-22 00:00:00
nessus
nessus
FreeBSD : lcms2 -- NULL pointer Dereference Denial of Service Vulnerability (9a0a892e-05d8-11e3-ba09-000c29784fd1)
2013-08-16 00:00:00
Ubuntu 13.04 : ghostscript vulnerability (USN-1911-2)
2013-08-01 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.04 : lcms2 vulnerability (USN-1911-1)
2013-07-30 00:00:00
cve
cve
CVE-2013-4160
2014-01-21 18:55:09
mageia
mageia
Updated lcms2 packages fixes security vulnerability
2013-08-09 21:30:53
debiancve
debiancve
CVE-2013-4160
2014-01-21 18:55:09
cvelist
cvelist
CVE-2013-4160
2014-01-21 18:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.024

Percentile

89.8%

JSON
Related for NVD:CVE-2013-4160
openvas5ubuntucve1securityvulns5prion1ubuntu2freebsd1nessus4cve1mageia1debiancve1cvelist1