CVE-2012-4405

Source
https://nvd.nist.gov/vuln/detail/CVE-2012-4405
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2012-4405.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2012-4405
Downstream
Published
2012-09-18T17:55:07Z
Modified
2025-08-09T20:01:26Z
Summary
[none]
Details

Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.

References

Affected packages