VDB
DEBIAN-CVE-2009-0792
DEBIAN-CVE-2009-0792
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | ghostscript | 0, 0, 0 |
| Debian:14 | argyll | 0, 0, 0 |
| Debian:11 | ghostscript | 0, 0, 0 |
| Debian:14 | ghostscript | 0, 0, 0 |
| Debian:12 | argyll | 0, 0, 0 |
| Debian:13 | argyll | 0, 0, 0 |
| Debian:11 | argyll | 0, 0, 0 |
| Debian:12 | ghostscript | 0, 0, 0 |
Timeline
- Apr 14, 2009 CVE Published
- Apr 28, 2026 CVE Updated