NVD

Id
48110  
Name
CVE-2009-0792  
Description
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-14  
Modified Date
2015-01-06  
Seq
2009-0792  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241563 48110 CVE-2009-0792 SUSE-SR:2009:009  View
241564 48110 CVE-2009-0792 SUSE-SR:2009:011  View
241565 48110 CVE-2009-0792 oval:org.mitre.oval:def:11207  View
241566 48110 CVE-2009-0792 GLSA-201412-17  View
241567 48110 CVE-2009-0792 262288  View
241568 48110 CVE-2009-0792 http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm  View
241569 48110 CVE-2009-0792 http://wiki.rpath.com/Advisories:rPSA-2009-0060  View
241570 48110 CVE-2009-0792 MDVSA-2009:095  View
241571 48110 CVE-2009-0792 MDVSA-2009:096  View
241572 48110 CVE-2009-0792 RHSA-2009:0420  View
241573 48110 CVE-2009-0792 RHSA-2009:0421  View
241574 48110 CVE-2009-0792 20090417 rPSA-2009-0060-1 ghostscript  View
241575 48110 CVE-2009-0792 USN-757-1  View
241576 48110 CVE-2009-0792 ADV-2009-1708  View
241577 48110 CVE-2009-0792 ghostscript-icc-bo(50381)  View
241578 48110 CVE-2009-0792 https://bugzilla.redhat.com/show_bug.cgi?id=491853  View
241579 48110 CVE-2009-0792 FEDORA-2009-3430  View
241580 48110 CVE-2009-0792 FEDORA-2009-3435  View
241581 48110 CVE-2009-0792 FEDORA-2009-3709  View
241582 48110 CVE-2009-0792 FEDORA-2009-3710  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40277 JVNDB-2009-001283 Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性 Ghostscript および Argyll Color Management System (CMS) の使用している International Color Consortium (ICC) フォーマットライブラリには、画像の組み込まれた PostScript または PDF ファイルの処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2009-0792 38223 CVE-2009-0792 48110 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001283.html 2009-04-14 2010-02-17 View