NVD

Id
47912  
Name
CVE-2009-0583  
Description
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-23  
Modified Date
2010-08-21  
Seq
2009-0583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240130 47912 CVE-2009-0583 http://bugs.gentoo.org/show_bug.cgi?id=261087  View
240131 47912 CVE-2009-0583 SUSE-SR:2009:007  View
240132 47912 CVE-2009-0583 oval:org.mitre.oval:def:10795  View
240133 47912 CVE-2009-0583 1021868  View
240134 47912 CVE-2009-0583 262288  View
240135 47912 CVE-2009-0583 http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm  View
240136 47912 CVE-2009-0583 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050  View
240137 47912 CVE-2009-0583 ESB-2009.0259  View
240138 47912 CVE-2009-0583 DSA-1746  View
240139 47912 CVE-2009-0583 GLSA-200903-37  View
240140 47912 CVE-2009-0583 MDVSA-2009:095  View
240141 47912 CVE-2009-0583 MDVSA-2009:096  View
240142 47912 CVE-2009-0583 RHSA-2009:0345  View
240143 47912 CVE-2009-0583 20090319 rPSA-2009-0050-1 ghostscript  View
240144 47912 CVE-2009-0583 34184  View
240145 47912 CVE-2009-0583 USN-743-1  View
240146 47912 CVE-2009-0583 USN-757-1  View
240147 47912 CVE-2009-0583 ADV-2009-0776  View
240148 47912 CVE-2009-0583 ADV-2009-0777  View
240149 47912 CVE-2009-0583 ADV-2009-0816  View
240150 47912 CVE-2009-0583 ADV-2009-1708  View
240151 47912 CVE-2009-0583 ghostscript-icclib-native-color-bo(49329)  View
240152 47912 CVE-2009-0583 https://bugzilla.redhat.com/show_bug.cgi?id=487742  View
240153 47912 CVE-2009-0583 https://issues.rpath.com/browse/RPL-2991  View
240154 47912 CVE-2009-0583 FEDORA-2009-2883  View
240155 47912 CVE-2009-0583 FEDORA-2009-2885  View
240156 47912 CVE-2009-0583 FEDORA-2009-3011  View
240157 47912 CVE-2009-0583 FEDORA-2009-3031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40130 JVNDB-2009-001136 ICC Format ライブラリにおける整数オーバーフローの脆弱性 Ghostscript などが使用している International Color Consortium (ICC) Format ライブラリの icc.c には、デバイスファイルの処理に不備があることにより、整数オーバーフローの脆弱性が存在します。 CVE-2009-0583 38014 CVE-2009-0583 47912 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001136.html 2009-03-23 2010-02-17 View