CVE-2008-5317 - CVE House
Back to Database
Status published Critical CVE-2008-5317

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in...

Vulnerability Description

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient memory.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5317

Credits & Attribution

No credits recorded in the NVD database.

References

More from littlecms

View All →
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an...
Medium 5.5
CVE-2018-11556
tificc in Little CMS 2.9 has an out-of-bounds write in...
High 7.8
CVE-2018-11555
tificc in Little CMS 2.9 has an out-of-bounds write in...
High 7.8
CVE-2016-10165
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2)...
High 7.1
CVE-2013-7455
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in...
Critical 9.8

Affected Vendor

Affected Software

lcms, little cms color engine
Vulnerable Versions:
0, 1.07, 1.08, 1.09, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15

Timeline

Official Publish: December 3rd, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.