[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1746 ghostscript -- several vulnerabilities

ID: oval:org.mitre.oval:def:7813Date: (C)2009-12-15   (M)2023-11-09
Class: PATCHFamily: unix




Two security issues have been discovered in ghostscript, the GPL Ghostscript PostScript/PDF interpreter. The Common Vulnerabilities and Exposures project identifies the following problems: Jan Lieskovsky discovered multiple integer overflows in the ICC library, which allow the execution of arbitrary code via crafted ICC profiles in PostScript files with embedded images. Jan Lieskovsky discovered insufficient upper-bounds checks on certain variable sizes in the ICC library, which allow the execution of arbitrary code via crafted ICC profiles in PostScript files with embedded images.

Platform:
Debian 5.0
Debian 4.0
Product:
ghostscript
Reference:
DSA-1746
CVE-2009-0583
CVE-2009-0584
CVE    2
CVE-2009-0583
CVE-2009-0584
CPE    2
cpe:/o:debian:debian_linux:4.x
cpe:/o:debian:debian_linux:5.x

© SecPod Technologies