CVE-2013-4276 - CVE House
Back to Database
Status published Medium CVE-2013-4276

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms)...

Vulnerability Description

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4276

Credits & Attribution

No credits recorded in the NVD database.

References

More from littlecms

View All →
CVE-2018-16435
Little CMS (aka Little Color Management System) 2.9 has an...
Medium 5.5
CVE-2018-11556
tificc in Little CMS 2.9 has an out-of-bounds write in...
High 7.8
CVE-2018-11555
tificc in Little CMS 2.9 has an out-of-bounds write in...
High 7.8
CVE-2016-10165
The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2)...
High 7.1
CVE-2013-7455
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in...
Critical 9.8

Affected Vendor

Affected Software

little cms color engine
Vulnerable Versions:
0, 1.07, 1.08, 1.09, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18

Timeline

Official Publish: September 28th, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.