CVE-2013-7455

Published May 7th, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

HIGH

Affected

PROJECT

Description

Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.

mm2/Little-CMS

A free, open source, CMM engine. It provides fast transforms between ICC profiles.

GitHub

719