CVE-2008-5317

2008-12-0300:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.012

Percentile

85.1%

JSON

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in
Little cms color engine (aka lcms) before 1.17 allows attackers to have an
unknown impact via a file containing a certain “number of entries” value,
which is interpreted improperly, leading to an allocation of insufficient
memory.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlcms< 1.13-1ubuntu0.1UNKNOWN
ubuntu7.10noarchlcms< 1.16-5ubuntu3.1UNKNOWN
ubuntu8.04noarchlcms< 1.16-7ubuntu1.1UNKNOWN
ubuntu8.10noarchlcms< 1.16-10ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	lcms	< 1.13-1ubuntu0.1	UNKNOWN
ubuntu	7.10	noarch	lcms	< 1.16-5ubuntu3.1	UNKNOWN
ubuntu	8.04	noarch	lcms	< 1.16-7ubuntu1.1	UNKNOWN
ubuntu	8.10	noarch	lcms	< 1.16-10ubuntu0.1	UNKNOWN