VDB
DEBIAN-CVE-2009-0584
DEBIAN-CVE-2009-0584
PUBLISHED
CVSS 9.300000190734863 CRITICAL
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | ghostscript | 0, 0, 0 |
| Debian:11 | ghostscript | 0, 0, 0 |
| Debian:11 | argyll | 0, 0, 0 |
| Debian:13 | argyll | 0, 0, 0 |
| Debian:13 | ghostscript | 0, 0, 0 |
| Debian:14 | argyll | 0, 0, 0 |
| Debian:12 | argyll | 0, 0, 0 |
| Debian:12 | ghostscript | 0, 0, 0 |
Timeline
- Mar 23, 2009 CVE Published
- Aug 4, 2026 CVE Updated