NVD

Id
47913  
Name
CVE-2009-0584  
Description
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-23  
Modified Date
2010-08-21  
Seq
2009-0584  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240158 47913 CVE-2009-0584 http://bugs.gentoo.org/show_bug.cgi?id=261087  View
240159 47913 CVE-2009-0584 SUSE-SR:2009:007  View
240160 47913 CVE-2009-0584 oval:org.mitre.oval:def:10544  View
240161 47913 CVE-2009-0584 1021868  View
240162 47913 CVE-2009-0584 262288  View
240163 47913 CVE-2009-0584 http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm  View
240164 47913 CVE-2009-0584 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0050  View
240165 47913 CVE-2009-0584 ESB-2009.0259  View
240166 47913 CVE-2009-0584 DSA-1746  View
240167 47913 CVE-2009-0584 GLSA-200903-37  View
240168 47913 CVE-2009-0584 MDVSA-2009:095  View
240169 47913 CVE-2009-0584 MDVSA-2009:096  View
240170 47913 CVE-2009-0584 RHSA-2009:0345  View
240171 47913 CVE-2009-0584 20090319 rPSA-2009-0050-1 ghostscript  View
240172 47913 CVE-2009-0584 34184  View
240173 47913 CVE-2009-0584 USN-743-1  View
240174 47913 CVE-2009-0584 USN-757-1  View
240175 47913 CVE-2009-0584 ADV-2009-0776  View
240176 47913 CVE-2009-0584 ADV-2009-0777  View
240177 47913 CVE-2009-0584 ADV-2009-0816  View
240178 47913 CVE-2009-0584 ADV-2009-1708  View
240179 47913 CVE-2009-0584 ghostscript-icclib-bo(49327)  View
240180 47913 CVE-2009-0584 https://bugzilla.redhat.com/show_bug.cgi?id=487744  View
240181 47913 CVE-2009-0584 https://issues.rpath.com/browse/RPL-2991  View
240182 47913 CVE-2009-0584 FEDORA-2009-2883  View
240183 47913 CVE-2009-0584 FEDORA-2009-2885  View
240184 47913 CVE-2009-0584 FEDORA-2009-3011  View
240185 47913 CVE-2009-0584 FEDORA-2009-3031  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40131 JVNDB-2009-001137 ICC Format ライブラリにおける任意のコードを実行される脆弱性 Ghostscript などが使用している International Color Consortium (ICC) Format ライブラリの icc.c には、デバイスファイルの処理に不備があることにより、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-0584 38015 CVE-2009-0584 47913 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001137.html 2009-03-23 2010-02-17 View