DEBIAN-CVE-2012-4405

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2012-4405
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2012-4405.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2012-4405
Upstream
Published
2012-09-18T17:55:07Z
Modified
2025-09-19T06:26:20Z
Summary
[none]
Details

Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.

References

Affected packages

Debian:11

argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12

argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13

argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14

argyll

Package

Name
argyll
Purl
pkg:deb/debian/argyll?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

ghostscript

Package

Name
ghostscript
Purl
pkg:deb/debian/ghostscript?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.05~dfsg-6.1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}