Little CMS 安全漏洞

漏洞信息详情

Little CMS（lcms或liblcms）是Marti Maria个人开发者的一套开源的色彩管理系统。该系统提供黑点补偿、多种像素格式处理、配置文件编辑等功能。

Little CMS(又叫lcms2)中的cmstypes.c文件的‘Type_MLU_Read’函数存在安全漏洞。远程攻击者可利用该漏洞获取敏感信息或造成拒绝服务。

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

https://github.com/mm2/Little-CMS/commit/5ca71a7bc18b6897ab21d815d15e218e204581e2

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4748/

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/1138588

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1734/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1734.2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-affect-ibm-netezza-analytics-for-nps/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-java-jre-8-0-1-1-affect-ibm-netezza-platform-software-clients/