CVE-2009-0584

Publication date 23 March 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.

Status

Package Ubuntu Release Status
ghostscript 8.10 intrepid
Fixed 8.63.dfsg.1-0ubuntu6.3
8.04 LTS hardy
Fixed 8.61.dfsg.1-1ubuntu3.1
7.10 gutsy
Fixed 8.61.dfsg.1~svn8187-0ubuntu3.5
6.06 LTS dapper Not in release
gs-gpl 8.10 intrepid Not in release
8.04 LTS hardy Not in release
7.10 gutsy Not in release
6.06 LTS dapper
Fixed 8.15-4ubuntu3.2

References

Related Ubuntu Security Notices (USN)

    • USN-743-1
    • Ghostscript vulnerabilities
    • 23 March 2009
    • USN-757-1
    • Ghostscript vulnerabilities
    • 15 April 2009

Other references