CVE-2013-7455

Published: May 7, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.

Affected (6)

Products: Littlecms: Little Cms Color Engine

Littlecms

1 product

Little Cms Color Engine

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Littlecms Little Cms Color Engine	Version 2.0
Littlecms Little Cms Color Engine	Version 2.1
Littlecms Little Cms Color Engine	Version 2.2
Littlecms Little Cms Color Engine	Version 2.3
Littlecms Little Cms Color Engine	Version 2.4
Littlecms Little Cms Color Engine	Version 2.5