VDB
CVE-2009-0584
CVE-2009-0584
PUBLISHED
CVSS 9.300000190734863 CRITICAL
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
EPSS 4.07% · 90.3th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
4.07%
90.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ghostscript | ghostscript | 8.56, 8.61, 5.50 |
| argyllcms | cms | 0 |
| n/a | n/a | * |
Timeline
- Mar 23, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
References
- SUSE-SR:2009:007 vendor-advisory
- 34437 third-party-advisory
- 34266 third-party-advisory
- 52988 vdb
- oval:org.mitre.oval:def:10544 vdb
- 34729 third-party-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050 url
- https://issues.rpath.com/browse/RPL-2991 url
- MDVSA-2009:095 vendor-advisory
- ADV-2009-0816 vdb
- 34469 third-party-advisory
- 35569 third-party-advisory
- ghostscript-icclib-bo(49327) vdb
- 34184 vdb
- MDVSA-2009:096 vendor-advisory
- 35559 third-party-advisory
- 34373 third-party-advisory
- 34398 third-party-advisory
- USN-757-1 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=261087 url
…and 23 more