ID CVE-2012-1616
Summary Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
References
Vulnerable Configurations
  • cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:argyllcms:argyllcms:1.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:argyllcms:argyllcms:1.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:color:icclib:1.23:*:*:*:*:*:*:*
    cpe:2.3:a:color:icclib:1.23:*:*:*:*:*:*:*
  • cpe:2.3:a:color:icclib:2.00:*:*:*:*:*:*:*
    cpe:2.3:a:color:icclib:2.00:*:*:*:*:*:*:*
  • cpe:2.3:a:color:icclib:2.02:*:*:*:*:*:*:*
    cpe:2.3:a:color:icclib:2.02:*:*:*:*:*:*:*
  • cpe:2.3:a:color:icclib:2.03:*:*:*:*:*:*:*
    cpe:2.3:a:color:icclib:2.03:*:*:*:*:*:*:*
  • cpe:2.3:a:color:icclib:2.11:*:*:*:*:*:*:*
    cpe:2.3:a:color:icclib:2.11:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 29-08-2017 - 01:31)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 53240
fedora FEDORA-2012-6529
gentoo GLSA-201206-04
misc
osvdb 81617
secunia
  • 48921
  • 49602
xf argyll-icc-code-execution(75162)
Last major update 29-08-2017 - 01:31
Published 21-06-2012 - 15:55
Last modified 29-08-2017 - 01:31
Back to Top