CVE-2012-4405

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2012-4405
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2012-4405.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2012-4405
Related
Published
2012-09-18T17:55:07Z
Modified
2024-11-21T01:42:49Z
Downstream
Summary
[none]
Details

Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.

References

Affected packages

Debian:11 / argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}