Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-1616

icclib: Use-after-free via crafted ICC profile files

Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed
Vendors
Argyllcms Color
Products
Argyllcms Icclib
CVE-2012-4405

argyllcms: Array index error leading to heap-based bufer OOB write

Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.

CVSS 2.0 · 6.8 Medium EPSS 7.5% KEV · Not listed
Vendors
Argyllcms Color Ghostscript and 1 more
Products
Cms Icclib Ghostscript and 1 more