Vulnerability Details : CVE-2012-1616
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.
Vulnerability category: Memory CorruptionExecute codeDenial of service
Products affected by CVE-2012-1616
- cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:argyllcms:argyllcms:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:color:icclib:*:*:*:*:*:*:*:*
- cpe:2.3:a:color:icclib:2.03:*:*:*:*:*:*:*
- cpe:2.3:a:color:icclib:2.02:*:*:*:*:*:*:*
- cpe:2.3:a:color:icclib:2.00:*:*:*:*:*:*:*
- cpe:2.3:a:color:icclib:1.23:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-1616
4.42%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 91 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-1616
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2012-1616
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-1616
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079762.html
[SECURITY] Fedora 16 Update: argyllcms-1.4.0-1.fc16
-
http://www.securityfocus.com/bid/53240
ICCLIB CVE-2012-1616 Use-After-Free Remote Code Execution Vulnerability
-
https://bugzilla.redhat.com/show_bug.cgi?id=809697
809697 – (CVE-2012-1616) CVE-2012-1616 icclib: Use-after-free via crafted ICC profile files
-
http://www.argyllcms.com/icc_readme.html
ICC File I/O README
-
http://security.gentoo.org/glsa/glsa-201206-04.xml
ArgyllCMS: User-assisted execution of arbitrary code (GLSA 201206-04) — Gentoo security
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/75162
Argyll Color Management System ICC code execution CVE-2012-1616 Vulnerability Report
Jump to