CVE-2009-0583

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

USN-744-1: LittleCMS vulnerabilities

Chris Evans discovered that LittleCMS did not properly handle certain error conditions, resulting in a large memory leak. If a user or automated system were tricked into processing an image with malicious ICC tags, a remote attacker could cause a denial of service. CVE-2009-0581 Chris Evans...

USN-743-1: Ghostscript vulnerabilities

It was discovered that Ghostscript contained multiple integer overflows in its ICC color management library. If a user or automated system were tricked into opening a crafted Postscript file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invokin...

CVE-2009-0723

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

CVE-2009-0723

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

CVE-2009-0723

Multiple integer overflows in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained fr...

CVE-2009-0723

CVE-2009-0723 affects LittleCMS (lcms/liblcms) before 1.18beta2. The vulnerability comprises multiple integer overflows that, when processing crafted image files, can trigger a heap-based buffer overflow. This issue is noted to be exploitable in contexts where LittleCMS is used (e.g., in Firefox ...

Ubuntu Update for python2.4, python2.5 vulnerabilities USN-632-1

Ubuntu Update for Linux kernel vulnerabilities USN-632-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6321.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for python2.4, python2.5 vulnerabilities USN-632-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for gimp vulnerability USN-494-1

Ubuntu Update for Linux kernel vulnerabilities USN-494-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4941.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gimp vulnerability USN-494-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libwpd vulnerability USN-437-1

Ubuntu Update for Linux kernel vulnerabilities USN-437-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4371.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libwpd vulnerability USN-437-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for ruby1.8 vulnerabilities USN-621-1

Ubuntu Update for Linux kernel vulnerabilities USN-621-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6211.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ruby1.8 vulnerabilities USN-621-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for php5 vulnerabilities USN-549-1

Ubuntu Update for Linux kernel vulnerabilities USN-549-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5491.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-549-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for e2fsprogs vulnerability USN-555-1

Ubuntu Update for Linux kernel vulnerabilities USN-555-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5551.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for e2fsprogs vulnerability USN-555-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libx11 vulnerability USN-453-1

Ubuntu Update for Linux kernel vulnerabilities USN-453-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4531.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libx11 vulnerability USN-453-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for xorg, xorg-server vulnerabilities USN-403-1

Ubuntu Update for Linux kernel vulnerabilities USN-403-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4031.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xorg, xorg-server vulnerabilities USN-403-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ghostscript: User-assisted execution of arbitrary code

Background Ghostscript is an interpreter for the PostScript language and the Portable Document Format PDF. Description Jan Lieskovsky from the Red Hat Security Response Team discovered the following vulnerabilities in Ghostscript's ICC Library: Multiple integer overflows CVE-2009-0583. Multiple...

Ubuntu: Security Advisory (USN-632-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-437-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-621-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...