[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

111017

 
 

909

 
 

86402

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2009:0345-01 -- Redhat ghostscript

ID: oval:org.secpod.oval:def:500651Date: (C)2012-01-31   (M)2018-06-20
Class: PATCHFamily: unix




Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures and an interpreter for Portable Document Format files. Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript"s International Color Consortium Format library . Using specially-crafted ICC profiles, an attacker could create a malicious PostScript or PDF file with embedded images which could cause Ghostscript to crash, or, potentially, execute arbitrary code when opened by the victim. All users of ghostscript are advised to upgrade to these updated packages, which contain a backported patch to correct these issues.

Platform:
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 3
Product:
ghostscript
Reference:
RHSA-2009:0345-01
CVE-2009-0583
CVE-2009-0584
CVE    2
CVE-2009-0583
CVE-2009-0584
CPE    4
cpe:/o:redhat:enterprise_linux:4
cpe:/a:ghostscript:ghostscript
cpe:/o:redhat:enterprise_linux:3
cpe:/o:redhat:enterprise_linux:5
...

© SecPod Technologies