43 matches found
Fedora 9 : argyllcms-1.0.3-3.fc9 (2009-3031)
Multiple integer overflows were found in the International Color Consortium Format Library icclib. An attacker could use this flaw to potentially execute arbitrary code by requesting to translate a specially- crafted image file created on one device into another's device native color space via a...
CVE-2009-0583
CVE-2009-0583 is a vulnerability in Ghostscript’s ICC library (icclib) affecting Ghostscript 8.64 and earlier (and Argyll CMS 1.0.3 and earlier). The issue is multiple integer overflows in icc.c that enable a context-dependent attacker to trigger a heap-based buffer overflow, crash the applicatio...
Ghostscript多个输入验证和整数溢出漏洞
BUGTRAQ ID: 34184 CVECAN ID: CVE-2009-0583,CVE-2009-0584 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript的国际色彩联盟格式库(icclib)中存在多个可导致堆溢出的整数溢出,以及多个不充分输入验证错误。攻击者可以使用特制的ICC配置文件创建嵌入了图形的恶意PostScript或PDF文件,如果受害用户打开了该文件就会导致Ghostscript崩溃或执行任意代码。 Ghostscript Ghostscript 8.x Ghostscript...