CVE-2018-11556

EUVD-2018-3583 · Published May 30, 2018

tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to the lcms2 library, lcms2 does not depends on LIBTIFF other than to build sample programs, and the issue cannot be reproduced on the lcms2 library.”

Technologies

Littlecms Little Cms

Weaknesses

CWE-787

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://github.com/mm2/Little-CMS/issues/167
https://github.com/xiaoqx/pocs/tree/master/cms

Potentially impacted assets

See if this affects your attack surface