Title: USN-3770-2: Little CMS vulnerabilities Publication Date: 20 September 2018 Overview: Several security issues were fixed in Little CMS Details: - Pedro Ribeiro discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2013-4276) - Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) - Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435) References: - CVE-2018-16435 - CVE-2016-10165 - CVE-2013-4276 Related Notices: - USN-3770-1