CVE Database
/

CVE-2009-0584

Back to search

CVE-2009-0584

Published: Mar 23, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.

VendorProductVersions

n/a

n/a

affected
n/a

References

34381
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2009:007
vendor-advisory
x_refsource_SUSE
34437
third-party-advisory
x_refsource_SECUNIA
34393
third-party-advisory
x_refsource_SECUNIA
GLSA-200903-37
vendor-advisory
x_refsource_GENTOO
1021868
vdb-entry
x_refsource_SECTRACK
34266
third-party-advisory
x_refsource_SECUNIA
34443
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-3031
vendor-advisory
x_refsource_FEDORA
DSA-1746
vendor-advisory
x_refsource_DEBIAN
52988
vdb-entry
x_refsource_OSVDB
ESB-2009.0259
third-party-advisory
x_refsource_AUSCERT
ADV-2009-0776
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:10544
vdb-entry
signature
x_refsource_OVAL
FEDORA-2009-2885
vendor-advisory
x_refsource_FEDORA
262288
vendor-advisory
x_refsource_SUNALERT
FEDORA-2009-3011
vendor-advisory
x_refsource_FEDORA
34418
third-party-advisory
x_refsource_SECUNIA
34729
third-party-advisory
x_refsource_SECUNIA
MDVSA-2009:095
vendor-advisory
x_refsource_MANDRIVA
ADV-2009-0816
vdb-entry
x_refsource_VUPEN
34469
third-party-advisory
x_refsource_SECUNIA
35569
third-party-advisory
x_refsource_SECUNIA
ADV-2009-1708
vdb-entry
x_refsource_VUPEN
ghostscript-icclib-bo(49327)
vdb-entry
x_refsource_XF
34184
vdb-entry
x_refsource_BID
MDVSA-2009:096
vendor-advisory
x_refsource_MANDRIVA
35559
third-party-advisory
x_refsource_SECUNIA
34373
third-party-advisory
x_refsource_SECUNIA
34398
third-party-advisory
x_refsource_SECUNIA
USN-757-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2009:0345
vendor-advisory
x_refsource_REDHAT
FEDORA-2009-2883
vendor-advisory
x_refsource_FEDORA
ADV-2009-0777
vdb-entry
x_refsource_VUPEN
20090319 rPSA-2009-0050-1 ghostscript
mailing-list
x_refsource_BUGTRAQ
USN-743-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now