CVE-2008-5316

Published Dec 3, 2008

Last updated 7 years ago

Overview

Description: Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 allows attackers to have an unknown impact via vectors related to a length parameter inconsistency involving the contents of "the input file," a different vulnerability than CVE-2007-2741.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F88D4AAB-DA31-4CFA-AF12-478C33A559C2",
            "versionEndIncluding": "1.15"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.07:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77D8173F-F341-4B34-A50A-388C93CABD01"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.08:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "405F539C-0A33-4703-8ADA-AF314EC92B76"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.09:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7DCBA042-6C91-4CDD-96A6-5E99B60519C5"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C3F25567-8DEF-491C-97F7-D2680115C02E"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "492B453F-5FC7-4B8B-9C42-C911FCA4BFDF"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CEFA9E7E-B7A9-4106-A480-0E57FCDA7B5F"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17B723CE-5A76-4DCE-9A2C-EFF32D4A5855"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:lcms:1.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "39EBE224-D0B7-4C74-B363-1BDA291594D1"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1A2834DF-6FA0-4305-85AD-179157C8FEF1",
            "versionEndIncluding": "1.15"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.07:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F3E1F2A4-2D67-4442-991B-BDD66DFD0A36"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.08:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "57F07310-A04B-49F3-B0F8-3B2BD1A70555"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.09:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F433BC9D-C6B2-446D-976C-7A4BB4F2F668"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F153ED4-BC68-44F1-A8E6-284FDCD4D7CA"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7287F9F3-504E-4DB7-B189-B11DB0A9890C"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D086B58-D972-461D-A7D3-F12CDFD3845E"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0F21DB4-D8CA-48F0-9EFE-4F1D90108663"
          },
          {
            "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "041BE71F-DCDC-47A7-8FF5-1B9A97FDB324"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References