Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-0584
HistoryMar 23, 2009 - 12:00 a.m.

CVE-2009-0584

2009-03-2300:00:00
ubuntu.com
ubuntu.com
10

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.8%

icc.c in the International Color Consortium (ICC) Format library (aka
icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
Management System (CMS) 1.0.3 and earlier, allows context-dependent
attackers to cause a denial of service (application crash) or possibly
execute arbitrary code by using a device file for processing a crafted
image file associated with large integer values for certain sizes, related
to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchghostscript<Β 8.61.dfsg.1~svn8187-0ubuntu3.5UNKNOWN
ubuntu8.04noarchghostscript<Β 8.61.dfsg.1-1ubuntu3.1UNKNOWN
ubuntu8.10noarchghostscript<Β 8.63.dfsg.1-0ubuntu6.3UNKNOWN
ubuntu6.06noarchgs-gpl<Β 8.15-4ubuntu3.2UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.008 Low

EPSS

Percentile

81.8%