ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-10165

—
CVSS 3.1
7.1 high
EPSS
3%p85
Published
()
Modified
Description

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.

Vendors
littlecmscanonicaldebianopensuseredhatnetapp
Products
little cms color engine, ubuntu linux, debian linux, leap, satellite, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation, active iq unified manager
Weakness
CWE-125
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news

No ingested article mentions this CVE yet.