CVE-2013-4276 PUBLISHED CVSS 4.300000190734863 MEDIUM

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

EPSS 2.34% · 84.7th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
2.34%
84.7th percentile

Affected Products

VendorProductVersions
littlecmslittle_cms_color_engine1.11, 0, 1.07
n/an/an/a

Timeline

References

Open in Interactive Console →