CVE-2012-1616 Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code...
HighCVSS 9.3
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/argyll(Debian:12) | < 1.4.0-1 | 1.4.0-1 |
| debian/argyll(Debian:13) | < 1.4.0-1 | 1.4.0-1 |
| debian/argyll(Debian:14) | < 1.4.0-1 | 1.4.0-1 |
| argyllcms | <= 1.3.7 | No fix listed |
| argyllcms | = 0.1.0 | No fix listed |
| argyllcms | = 0.2.0 | No fix listed |
| argyllcms | = 0.2.1 | No fix listed |
| argyllcms | = 0.2.2 | No fix listed |
| argyllcms | = 0.3.0 | No fix listed |
| argyllcms | = 0.6.0 | No fix listed |
| argyllcms | = 0.7.0-beta_8 | No fix listed |
| argyllcms | = 1.0.0 | No fix listed |
| argyllcms | = 1.0.2 | No fix listed |
| argyllcms | = 1.0.3 | No fix listed |
| argyllcms | = 1.0.4 | No fix listed |
| argyllcms | = 1.1.0 | No fix listed |
| argyllcms | = 1.1.1 | No fix listed |
| argyllcms | = 1.2.0 | No fix listed |
| argyllcms | = 1.3.0 | No fix listed |
| argyllcms | = 1.3.1 | No fix listed |
| argyllcms | = 1.3.2 | No fix listed |
| argyllcms | = 1.3.3 | No fix listed |
| argyllcms | = 1.3.4 | No fix listed |
| argyllcms | = 1.3.5 | No fix listed |
| argyllcms | = 1.3.6 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| color icclib | <= 2.11 | No fix listed |
| color icclib | = 1.23 | No fix listed |
| color icclib | = 2.00 | No fix listed |
| color icclib | = 2.02 | No fix listed |
| color icclib | = 2.03 | No fix listed |
References
- Debian Security Tracker CVE-2012-1616 vendor-advisory
- FEDORA-2012-6529 vendor-advisory
- 48921 third-party-advisory vendor-advisory
- 49602 third-party-advisory vendor-advisory
- GLSA-201206-04 vendor-advisory
- www.argyllcms.com
- 81617 vdb-entry
- 53240 vdb-entry
- bugzilla.redhat.com
- argyll-icc-code-execution(75162) vdb-entry