Security Advisory
CVE-2013-7455
9.8
CRITICAL
Vulnerability Description
Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that triggers an error in the default intent handler.
Published Date
May 7, 2016
Official Source
NIST NVD Advisory