Ghostscript多个输入验证和整数溢出漏洞

BUGTRAQ ID: 34184 CVECAN ID: CVE-2009-0583,CVE-2009-0584 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript的国际色彩联盟格式库（icclib）中存在多个可导致堆溢出的整数溢出，以及多个不充分输入验证错误。攻击者可以使用特制的ICC配置文件创建嵌入了图形的恶意PostScript或PDF文件，如果受害用户打开了该文件就会导致Ghostscript崩溃或执行任意代码。 Ghostscript Ghostscript 8.x Ghostscript...

Fedora 9 : ghostscript-8.63-2.fc9 (2009-2883)

Security update for integer overflows CVE-2009-0583 and upper bounds checks CVE-2009-0584 in the ICC profile handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...

[SECURITY] Fedora 10 Update: ghostscript-8.63-5.fc10

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

[SECURITY] Fedora 9 Update: ghostscript-8.63-2.fc9

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

[SECURITY] [DSA 1746-1] New ghostscript packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1746-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

Debian DSA-1746-1 : ghostscript - several vulnerabilities

Two security issues have been discovered in ghostscript, the GPL Ghostscript PostScript/PDF interpreter. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0583 Jan Lieskovsky discovered multiple integer overflows in the ICC library, which allow the...

RHEL 3 / 4 / 5 : ghostscript (RHSA-2009:0345)

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...

CentOS 3 / 4 : ghostscript (CESA-2009:0345)

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...

DSA-1746-1 ghostscript gs-gpl - arbitrary code execution

Bulletin has no description...

RedHat Security Advisory RHSA-2009:0345

The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

RedHat Security Advisory RHSA-2009:0345

The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

ghostscript integer overflow

Integer overflows in ICC library...

rPSA-2009-0050-1 ghostscript

rPath Security Advisory: 2009-0050-1 Published: 2009-03-19 Products: rPath Linux 2 Rating: Minor Exposure Level Classification: Indirect Deterministic Vulnerability Updated Versions: ghostscript=conary.rpath.com@rpl:devel/8.61-2.1-1 rPath Issue Tracking System:...

ghostscript, hpijs security update

CentOS Errata and Security Advisory CESA-2009:0345 Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set o...

Moderate: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...

ghostscript security update

8.15.2-9.4:.4 - Avoid dividing by zero while checking for integer overflows. 8.15.2-9.4:.1 - Applied patch to fix CVE-2009-0583 bug 487742 and CVE-2009-0584 bug 487744...

PT-2009-3227 · Artifex +2 · Ghostscript +2

Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.64 and earlier Argyll Color Management System CMS versions 1.0.3 and earlier Description: The issue is related to multiple integer overflows in the ICC Format library, which can be exploited by context-dependent attacke...

RedHat Update for ghostscript RHSA-2008:0155-01

Check for the Version of ghostscript OpenVAS Vulnerability Test RedHat Update for ghostscript RHSA-2008:0155-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for ghostscript RHSA-2008:0155-01

Check for the Version of ghostscript OpenVAS Vulnerability Test RedHat Update for ghostscript RHSA-2008:0155-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for ghostscript CESA-2008:0155 centos4 x86_64

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2008:0155 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...