Little CMS Multiple Remote Buffer Overflow Vulnerabilities
BID:61607
Info
Little CMS Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 61607 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4276 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2013 12:00AM |
| Updated: | May 07 2015 06:18PM |
| Credit: | Pedro R |
| Vulnerable: |
MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux |
| Not Vulnerable: | |
Discussion
Little CMS Multiple Remote Buffer Overflow Vulnerabilities
Little CMS is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Little CMS 1.19 is vulnerable; other versions may also be affected.
Little CMS is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
Little CMS 1.19 is vulnerable; other versions may also be affected.
Exploit / POC
Little CMS Multiple Remote Buffer Overflow Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Little CMS Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Reportedly these issues are fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly these issues are fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
Little CMS Multiple Remote Buffer Overflow Vulnerabilities
References:
References: