CVE-2013-4160

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference…

published January 21, 2014

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02809 · 86.3th percentile
Published
2014-01-21T18:00Z
EPSS history
Timeline
  • 21 JAN 18:00Z
    Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference…
    cvelistv5