Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200904-19 Normal: LittleCMS Code Execution Issue

gentoo
Calendar Grey April 19, 2009
Scroller Gentoo
Recent vulnerabilities in LittleCMS on Gentoo systems may lead to remote code execution or service disruption (DoS). Make sure to upgrade to the most recent version. Keep your system safe!
Multiple errors in LittleCMS allow for attacks including the remote execution of arbitrary code.

Summary

Gentoo Linux Security Advisory GLSA 200904-19 https://security.gentoo.org/ Severity: Normal Title: LittleCMS: Multiple vulnerabilities Date: April 19, 2009 Bugs: #260269, #264604 ID: 200904-19

Synopsis ======= Multiple errors in LittleCMS allow for attacks including the remote execution of arbitrary code.
Background ========= LittleCMS, or short lcms, is a color management system for working with ICC profiles. It is used by many applications including GIMP and Firefox.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/lcms < 1.18-r1 >= 1.18-r1
========== RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles (CVE-...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution DoS memory management error vulnerability LittleCMS

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution DoS memory management error vulnerability LittleCMS

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround