VDB
CVE-2009-0583
CVE-2009-0583
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
EPSS 4.75% · 91.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
4.75%
91.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| ghostscript | ghostscript | 8.62, 7.05, 7.07 |
| argyllcms | argyllcms | 0.1.0, 0.2.0, 0.2.2 |
Timeline
- Mar 23, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Feb 10, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
References
- 34381 third-party-advisory
- SUSE-SR:2009:007 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm url
- GLSA-200903-37 vendor-advisory
- FEDORA-2009-3031 vendor-advisory
- DSA-1746 vendor-advisory
- ESB-2009.0259 third-party-advisory
- ADV-2009-0776 vdb
- 262288 vendor-advisory
- FEDORA-2009-3011 vendor-advisory
- 34418 third-party-advisory
- 34729 third-party-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050 url
- https://issues.rpath.com/browse/RPL-2991 url
- oval:org.mitre.oval:def:10795 vdb
- ADV-2009-0816 vdb
- 35559 third-party-advisory
- RHSA-2009:0345 vendor-advisory
- ADV-2009-0777 vdb
- ghostscript-icclib-native-color-bo(49329) vdb
…and 24 more