Upstream information
Description
Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 9.3 | 
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C | 
| Access Vector | Network | 
| Access Complexity | Medium | 
| Authentication | None | 
| Confidentiality Impact | Complete | 
| Integrity Impact | Complete | 
| Availability Impact | Complete | 
List of released packages
| Product(s) | Fixed package version(s) | References | 
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP1 | 
  |  Patchnames:  SUSE Linux Enterprise Desktop 12 SP1 GA argyllcms-1.6.3-1.179 SUSE Linux Enterprise Workstation Extension 12 SP1 GA argyllcms-1.6.3-1.179  | 
| SUSE Linux Enterprise Desktop 12 SP2 | 
  |  Patchnames:  SUSE Linux Enterprise Desktop 12 SP2 GA argyllcms-1.6.3-3.3 SUSE Linux Enterprise Workstation Extension 12 SP2 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Desktop 12 SP3 | 
  |  Patchnames:  SUSE Linux Enterprise Desktop 12 SP3 GA argyllcms-1.6.3-3.3 SUSE Linux Enterprise Workstation Extension 12 SP3 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Desktop 12 SP4 | 
  |  Patchnames:  SUSE Linux Enterprise Desktop 12 SP4 GA argyllcms-1.6.3-3.3 SUSE Linux Enterprise Workstation Extension 12 SP4 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Desktop 12 | 
  |  Patchnames:  SUSE Linux Enterprise Desktop 12 GA argyllcms-1.6.3-1.179 SUSE Linux Enterprise Workstation Extension 12 GA argyllcms-1.6.3-1.179  | 
| SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 15 SP1 GA argyllcms-1.9.2-2.27  | 
| SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP2  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 15 SP2 GA argyllcms-1.9.2-2.27  | 
| SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Workstation Extension 15 SP3  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 15 SP3 GA argyllcms-1.9.2-2.27  | 
| SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 15 GA argyllcms-1.9.2-2.27  | 
| SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP1  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 SP1 GA argyllcms-1.6.3-1.179  | 
| SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 SP2 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 SP3 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 SP4 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 SP5 GA argyllcms-1.6.3-3.3  | 
| SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Workstation Extension 12  |  
  |  Patchnames:  SUSE Linux Enterprise Workstation Extension 12 GA argyllcms-1.6.3-1.179  | 
| SUSE Linux Enterprise Server 16.0 | 
  |  Patchnames:  SUSE Linux Enterprise Server 16.0 GA argyllcms-3.3.0-160000.2.2  | 
| openSUSE Leap 15.0 | 
  |  Patchnames:  openSUSE Leap 15.0 GA argyllcms-1.9.2-lp150.2.4  | 
| openSUSE Leap 15.3 | 
  |  Patchnames:  openSUSE Leap 15.3 GA argyllcms-1.9.2-2.27  | 
| openSUSE Tumbleweed | 
  |  Patchnames:  openSUSE-Tumbleweed-2024-10284  | 
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 12:34:52 2013CVE page last modified: Sun Nov 2 12:30:36 2025