CVE-2018-11556
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-11556
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS developers do consider this a vulnerability because the issue is based on an sample program using LIBTIFF and do not apply to the lcms2 library, lcms2 does not depends on LIBTIFF other than to build sample programs, and the issue cannot be reproduced on the lcms2 library.”
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Little CMS tificc 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Little CMS（lcms或liblcms）是Marti Maria软件开发者的一套开源的色彩管理系统。该系统提供黑点补偿、多种像素格式处理、配置文件编辑等功能。tificc是其中的一个ICC配置文件应用程序。 Little CMS 2.9版本中的tificc的cmslut.c文件的‘cmsPipelineCheckAndRetreiveStages’函数存在缓冲区错误漏洞。攻击者可借助特制的TIFF文件利用该漏洞造成段错误（越界写入）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-11556
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-11556
请登录查看更多情报信息。
- https://github.com/xiaoqx/pocs/tree/master/cmsx_refsource_MISC
- https://github.com/mm2/Little-CMS/issues/167x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-11556
Same Patch Batch · n/a · 2018-05-30 · 30 CVEs total
| CVE-2018-10995 | SchedMD Slurm 输入验证错误漏洞 | |
| CVE-2018-11568 | GamePlan theme for WordPress 跨站脚本漏洞 | |
| CVE-2018-11567 | Amazon Echo 安全漏洞 | |
| CVE-2018-7534 | Unisys Stealth Solution Stealth Authorization Server 安全漏洞 | |
| CVE-2018-11565 | Catalyst Mahara 安全漏洞 | |
| CVE-2018-11482 | 多款TP-LINK产品访问控制错误漏洞 | |
| CVE-2018-11481 | 多款TP-LINK产品安全漏洞 | |
| CVE-2018-11478 | Vgate iCar 2 Wi-Fi OBD2 Dongle 安全漏洞 | |
| CVE-2018-11477 | Vgate iCar 2 Wi-Fi OBD2 Dongle 安全漏洞 | |
| CVE-2018-11476 | Vgate iCar 2 Wi-Fi OBD2 Dongle 安全漏洞 | |
| CVE-2018-10939 | Zimbra Collaboration Suite Zimbra Web Client 跨站脚本漏洞 | |
| CVE-2018-10196 | Graphviz 代码问题漏洞 | |
| CVE-2015-7610 | Zimbra Collaboration Suite 跨站请求伪造漏洞 | |
| CVE-2018-11562 | MISP 跨站脚本漏洞 | |
| CVE-2018-11518 | HCL legacy IVR系统安全漏洞 | |
| CVE-2018-11233 | Git 输入验证错误漏洞 | |
| CVE-2018-11439 | TagLib 安全漏洞 | |
| CVE-2018-11438 | Libmobi 缓冲区错误漏洞 | |
| CVE-2018-11437 | Libmobi 安全漏洞 | |
| CVE-2018-11436 | Libmobi 安全漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8747
Z-BlogPHP Commend Approval c_system_event.php CheckComment i - CVE-2026-8746
Open5GS NRF nghttp2-server.c discover_handler use after free - CVE-2026-8745
Open5GS AUSF nausf-handler.c ogs_timer_add denial of service - CVE-2026-8744
Open5GS NRF context.c ogs_sbi_nf_service_add denial of servi - CVE-2026-8743
Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id impr
V. Comments for CVE-2018-11556
No comments yet