vulnerability
CentOS Linux: CVE-2018-16435: Important: chromium-browser security update (CESA-2018:3004)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:N/A:P) | Sep 4, 2018 | Aug 28, 2019 | May 25, 2023 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Sep 4, 2018
Added
Aug 28, 2019
Modified
May 25, 2023
Description
Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.
Solutions
centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.