« Volver al listado

CVE-2013-4276

Estado: ModificadaMedia (4.3)—

Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Littlecms — Little CMS Color Engine

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-4276",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-09-28T19:55:03.163",
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718682",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00021.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00029.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/08/22/3",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/61607",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=991757",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=992975",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://usn.ubuntu.com/3770-2/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718682",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00021.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-updates/2013-10/msg00029.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2013/08/22/3",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/61607",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=991757",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=992975",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://usn.ubuntu.com/3770-2/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades buffer overflow de pila en LittleCMS (tambien conocido como lcms o liblcms) 1.19 y anteriores, permite a un atacante remoto causar una denegación de servicio (caída) a través de (1) un perfil ICC color manipulado en la utilidad icctrans, o (2) una imágen TIFF manipulada en la utilidad tiffdiff."
    }
  ],
  "lastModified": "2026-06-16T23:56:56.150",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4813D716-1A54-448C-97BB-39B87B4DE26D",
              "versionEndIncluding": "1.19"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.07:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3E1F2A4-2D67-4442-991B-BDD66DFD0A36"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.08:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57F07310-A04B-49F3-B0F8-3B2BD1A70555"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.09:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F433BC9D-C6B2-446D-976C-7A4BB4F2F668"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F153ED4-BC68-44F1-A8E6-284FDCD4D7CA"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7287F9F3-504E-4DB7-B189-B11DB0A9890C"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D086B58-D972-461D-A7D3-F12CDFD3845E"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0F21DB4-D8CA-48F0-9EFE-4F1D90108663"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "041BE71F-DCDC-47A7-8FF5-1B9A97FDB324"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "650BF28E-8D28-45C0-99C2-D6B78AA9BE6D"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCF93C4A-D7FD-4DCB-BC46-2E43E644CA47"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF3D3FD4-37CD-41E8-B206-CC3A2F01C0A8"
            },
            {
              "criteria": "cpe:2.3:a:littlecms:little_cms_color_engine:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82B95E7A-909A-4C93-A4EF-CE9E9709CF79"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}