CVE-2013-4160

Published: Jan 21, 2014Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.

Affected (18)

Products: Littlecms: Little Cms Color Engine

Littlecms

1 product

Little Cms Color Engine

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Littlecms Little Cms Color Engine	Up to 2.4
Littlecms Little Cms Color Engine	Version 1.07
Littlecms Little Cms Color Engine	Version 1.08
Littlecms Little Cms Color Engine	Version 1.09
Littlecms Little Cms Color Engine	Version 1.10
Littlecms Little Cms Color Engine	Version 1.11
Littlecms Little Cms Color Engine	Version 1.12
Littlecms Little Cms Color Engine	Version 1.13
Littlecms Little Cms Color Engine	Version 1.14
Littlecms Little Cms Color Engine	Version 1.15
Littlecms Little Cms Color Engine	Version 1.16
Littlecms Little Cms Color Engine	Version 1.17
Littlecms Little Cms Color Engine	Version 1.18
Littlecms Little Cms Color Engine	Version 1.19
Littlecms Little Cms Color Engine	Version 2.0
Littlecms Little Cms Color Engine	Version 2.1
Littlecms Little Cms Color Engine	Version 2.2
Littlecms Little Cms Color Engine	Version 2.3