[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foBYGGyFpZ5Q7tZCtaRLnQl3gKTfcFqA4q41ZGacd97Y":3,"g5a-risk:CVE-2018-16435":204},{"success":4,"data":5,"meta":202},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":83,"references":84,"referencesCount":119,"weaknesses":120,"weaknessesCount":134,"isActivelyExploited":135,"cisaInfo":15,"otxData":15,"relatedBlogPosts":136,"seoMetadata":137,"configurations":162,"relatedVendorCves":200,"notableEvents":201},"CVE-2018-16435","What is CVE-2018-16435?","Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.","Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer ove...","2018-09-04T00:29:02.183","2021-05-26T11:15:08.243",5.5,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",1.8,3.6,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":28,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":36,"AccessComplexity":28,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NETWORK","PARTIAL",4.3,8.6,2.9,0.0174,[41,41,41,41,41,41,41],"Medium",[45,50,55,58,61,64,69,72,75,80],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"littlecms","little_cms_color_engine","2.9","cpe:2.3:a:littlecms:little_cms_color_engine:2.9:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":51,"product":52,"version":59,"criteria":60,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":51,"product":52,"version":62,"criteria":63,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":4},"redhat","enterprise_linux_desktop","6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":65,"product":70,"version":67,"criteria":71,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":65,"product":73,"version":67,"criteria":74,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":81,"criteria":82,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",10,[85,90,95,100,105,109,113,116],{"url":86,"source":87,"tags":88},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3004","Red Hat",[89],"Third Party Advisory",{"url":91,"source":92,"tags":93},"https:\u002F\u002Fgithub.com\u002Fmm2\u002FLittle-CMS\u002Fcommit\u002F768f70ca405cd3159d990e962d54456773bb8cf8","GitHub",[94,89],"Patch",{"url":96,"source":92,"tags":97},"https:\u002F\u002Fgithub.com\u002Fmm2\u002FLittle-CMS\u002Fissues\u002F171",[98,99,94,89],"Exploit","Issue Tracking",{"url":101,"source":102,"tags":103},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F09\u002Fmsg00005.html","Debian",[104,89],"Mailing List",{"url":106,"source":107,"tags":108},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202105-18","Gentoo",[],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fusn.ubuntu.com\u002F3770-1\u002F","Ubuntu",[89],{"url":114,"source":111,"tags":115},"https:\u002F\u002Fusn.ubuntu.com\u002F3770-2\u002F",[89],{"url":117,"source":102,"tags":118},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4284",[89],8,[121,129],{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":127,"structure":128},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":130,"name":131,"description":132,"extendedDescription":125,"status":133,"abstraction":127,"structure":128},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","Stable",2,false,[],{"title":138,"metaDescription":139,"keywords":140,"canonicalUrl":141,"structuredData":142},"What is CVE-2018-16435? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-16435, a medium severity cyber security vulnerability from 2018. Little CMS (aka Little Color Management System) 2.9 has a...","CVE-2018-16435, CVE-2018-16435 vulnerability, CVE-2018-16435 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, littlecms security, canonical security, redhat security, debian security, little_cms_color_engine vulnerability, ubuntu_linux vulnerability, enterprise_linux_desktop vulnerability, enterprise_linux_server vulnerability","\u002Fwhat-is\u002Fcve-2018-16435",{"@context":143,"@type":144,"headline":138,"description":139,"datePublished":10,"dateModified":11,"author":145,"publisher":149,"about":153,"mainEntityOfPage":157,"articleSection":160,"keywords":161},"https:\u002F\u002Fschema.org","TechArticle",{"@type":146,"name":147,"url":148},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":146,"name":147,"url":148,"logo":150},{"@type":151,"url":152},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":154,"name":6,"description":155,"additionalType":156},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":158,"@id":159},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-16435","Cybersecurity","CVE-2018-16435, CVE-2018-16435 vulnerability, CVE-2018-16435 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[163,170,182,192],{"Operator":15,"Negate":15,"Nodes":164},[165],{"Operator":166,"Negate":15,"CPEMatch":167},"OR",[168],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"08FF7CFA-711D-4DF6-A628-388B9569063B",{"Operator":15,"Negate":15,"Nodes":171},[172],{"Operator":166,"Negate":15,"CPEMatch":173},[174,176,178,180],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":175,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8D305F7A-D159-4716-AB26-5E38BB5CD991",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":177,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Operator":15,"Negate":15,"Nodes":183},[184],{"Operator":166,"Negate":15,"CPEMatch":185},[186,188,190],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":187,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":191,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",{"Operator":15,"Negate":15,"Nodes":193},[194],{"Operator":166,"Negate":15,"CPEMatch":195},[196,198],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":197,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":203,"version":34},1792269271917,{"score":205,"band":43,"action":206,"scoredAt":207},40,"Plan remediation","2026-10-16T06:44:46.471076+00:00"]