NVD

Id
45797  
Name
CVE-2012-4405  
Description
Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-18  
Modified Date
2015-01-12  
Seq
2012-4405  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229835 45797 CVE-2012-4405 SUSE-SU-2012:1222  View
229836 45797 CVE-2012-4405 openSUSE-SU-2012:1289  View
229837 45797 CVE-2012-4405 openSUSE-SU-2012:1290  View
229838 45797 CVE-2012-4405 RHSA-2012:1256  View
229839 45797 CVE-2012-4405 GLSA-201412-17  View
229840 45797 CVE-2012-4405 MDVSA-2012:151  View
229841 45797 CVE-2012-4405 MDVSA-2013:089  View
229842 45797 CVE-2012-4405 MDVSA-2013:090  View
229843 45797 CVE-2012-4405 [oss-security] 20120911 CVE-2012-4405 ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write  View
229844 45797 CVE-2012-4405 55494  View
229845 45797 CVE-2012-4405 1027517  View
229846 45797 CVE-2012-4405 USN-1581-1  View
229847 45797 CVE-2012-4405 icclib-pdf-bo(78411)  View
229848 45797 CVE-2012-4405 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0301  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28750 JVNDB-2012-004457 International Color Consortium Format library における整数アンダーフローの脆弱性 Ghostscript および Argyll Color Management System で使用される International Color Consortium (ICC) Format library (icclib) の icmLut_allocate 関数には、整数アンダーフローの脆弱性が存在します。 CVE-2012-4405 57643 CVE-2012-4405 45797 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004457.html 2012-09-18 2012-11-13 View