[Forgot Password]
Login  Register Subscribe

23631

 
 

125093

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2009:0345-01 -- Redhat ghostscript

ID: oval:org.secpod.oval:def:500651Date: (C)2012-01-31   (M)2017-10-04
Class: PATCHFamily: unix




Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures and an interpreter for Portable Document Format files. Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript"s International Color Consortium Format library . Using specially-crafted ICC profiles, an attacker could create a malicious PostScript or PDF file with embedded images which could cause Ghostscript to crash, or, potentially, execute arbitrary code when opened by the victim. All users of ghostscript are advised to upgrade to these updated packages, which contain a backported patch to correct these issues.

Platform:
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 3
Product:
ghostscript
Reference:
RHSA-2009:0345-01
CVE-2009-0583
CVE-2009-0584
CVE    2
CVE-2009-0583
CVE-2009-0584
CPE    4
cpe:/o:redhat:enterprise_linux:3
cpe:/a:ghostscript:ghostscript
cpe:/o:redhat:enterprise_linux:4
cpe:/o:redhat:enterprise_linux:5
...

© 2013 SecPod Technologies