The TypeMLURead function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read.
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.5-0ubuntu4.2", "binary_name": "liblcms2-2" }, { "binary_version": "2.5-0ubuntu4.2", "binary_name": "liblcms2-2-dbgsym" }, { "binary_version": "2.5-0ubuntu4.2", "binary_name": "liblcms2-dev" }, { "binary_version": "2.5-0ubuntu4.2", "binary_name": "liblcms2-utils" }, { "binary_version": "2.5-0ubuntu4.2", "binary_name": "liblcms2-utils-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "icedtea-7-jre-jamvm" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-dbg" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-demo" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-doc" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-jdk" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-jre" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-jre-headless" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-jre-lib" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-jre-zero" }, { "binary_version": "7u121-2.6.8-1ubuntu0.14.04.1", "binary_name": "openjdk-7-source" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-2" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-2-dbgsym" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-dbg" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-dev" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-dev-dbgsym" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-utils" }, { "binary_version": "2.6-3ubuntu2.1", "binary_name": "liblcms2-utils-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.8-4", "binary_name": "liblcms2-2" }, { "binary_version": "2.8-4", "binary_name": "liblcms2-2-dbgsym" }, { "binary_version": "2.8-4", "binary_name": "liblcms2-dev" }, { "binary_version": "2.8-4", "binary_name": "liblcms2-utils" }, { "binary_version": "2.8-4", "binary_name": "liblcms2-utils-dbgsym" } ] }