PatchTheCVEargyllcms vulnerabilities
Recent CVEs affecting argyllcms products. 2 tracked.
argyllcms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-09-18. Highest priority: CVE-2012-1616 (score 56/100).
- CVE-2012-4405 MEDIUM 6.8 MITIGATE MITIGATE Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format lib
- CVE-2012-1616 HIGH 9.3 UPGRADE UPGRADE Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other progra
FAQ
How do I fix argyllcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is argyllcms being exploited right now?
None of the tracked argyllcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which argyllcms CVE should I patch first?
CVE-2012-1616 currently ranks highest (56/100): Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other progra.