Unrated severityNVD Advisory· Published Sep 28, 2013· Updated Jun 16, 2026
CVE-2013-4276
CVE-2013-4276
Description
Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of service (crash) via a crafted (1) ICC color profile to the icctrans utility or (2) TIFF image to the tiffdiff utility.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*+ 12 more
- cpe:2.3:a:littlecms:little_cms_color_engine:*:*:*:*:*:*:*:*range: <=1.19
- cpe:2.3:a:littlecms:little_cms_color_engine:1.07:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.08:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.09:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.11:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.12:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.13:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.14:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.15:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.16:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.17:*:*:*:*:*:*:*
- cpe:2.3:a:littlecms:little_cms_color_engine:1.18:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- www.openwall.com/lists/oss-security/2013/08/22/3nvdPatch
- bugzilla.redhat.com/show_bug.cginvdPatch
- bugs.debian.org/cgi-bin/bugreport.cginvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2013-10/msg00021.htmlnvd
- lists.opensuse.org/opensuse-updates/2013-10/msg00029.htmlnvd
- www.securityfocus.com/bid/61607nvd
- usn.ubuntu.com/3770-2/nvd
News mentions
0No linked articles in our index yet.