CVE-2009-0583 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-0583 Interim 1 14 2023-12-09T02:05:52Z current 2021-05-30T12:45:55Z 2023-12-09T02:05:52Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-0583 Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NOZXT5CRBFF3XA2BV65LMEOU4RCEEGD5/#NOZXT5CRBFF3XA2BV65LMEOU4RCEEGD5 E-Mail link for SUSE-SR:2009:007 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-devel-8.62-32.34.1 ghostscript-fonts-other-8.62-32.22.2 ghostscript-fonts-other-8.62-32.27.31 ghostscript-fonts-other-8.62-32.28.1 ghostscript-fonts-other-8.62-32.34.1 ghostscript-fonts-rus-8.62-32.22.2 ghostscript-fonts-rus-8.62-32.27.31 ghostscript-fonts-rus-8.62-32.28.1 ghostscript-fonts-rus-8.62-32.34.1 ghostscript-fonts-std-8.62-32.22.2 ghostscript-fonts-std-8.62-32.27.31 ghostscript-fonts-std-8.62-32.28.1 ghostscript-fonts-std-8.62-32.34.1 ghostscript-ijs-devel-8.62-32.34.1 ghostscript-library-8.62-32.22.2 ghostscript-library-8.62-32.27.31 ghostscript-library-8.62-32.28.1 ghostscript-library-8.62-32.34.1 ghostscript-omni-8.62-32.22.2 ghostscript-omni-8.62-32.27.31 ghostscript-omni-8.62-32.28.1 ghostscript-omni-8.62-32.34.1 ghostscript-x11-8.62-32.22.2 ghostscript-x11-8.62-32.27.31 ghostscript-x11-8.62-32.28.1 ghostscript-x11-8.62-32.34.1 libgimpprint-4.2.7-32.22.2 libgimpprint-4.2.7-32.27.31 libgimpprint-4.2.7-32.28.1 libgimpprint-4.2.7-32.34.1 libgimpprint-devel-4.2.7-32.34.1 ghostscript-fonts-other-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-rus-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-std-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-library-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-omni-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-x11-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 libgimpprint-4.2.7-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-other-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-rus-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-std-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-library-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-omni-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-x11-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 libgimpprint-4.2.7-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-other-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-rus-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-std-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-library-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-omni-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-x11-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 libgimpprint-4.2.7-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-other-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-rus-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-std-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-library-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-omni-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-x11-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgimpprint-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-other-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-rus-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-std-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-library-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-omni-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-x11-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgimpprint-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-other-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-fonts-rus-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-fonts-std-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-library-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-omni-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-x11-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libgimpprint-4.2.7-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-devel-8.62-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-ijs-devel-8.62-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgimpprint-devel-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. CVE-2009-0583 SUSE Linux Enterprise Server 11:ghostscript-fonts-other-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-fonts-rus-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-fonts-std-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-library-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-omni-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-x11-8.62-32.22.2 SUSE Linux Enterprise Server 11:libgimpprint-4.2.7-32.22.2 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-other-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-rus-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-std-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-library-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-omni-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-x11-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:libgimpprint-4.2.7-32.27.31 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-other-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-rus-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-std-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-library-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-omni-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-x11-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:libgimpprint-4.2.7-32.28.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-other-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-rus-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-std-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-library-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-omni-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-x11-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:libgimpprint-4.2.7-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.34.1 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-other-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-rus-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-std-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-library-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-omni-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-x11-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:libgimpprint-4.2.7-32.22.2 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.34.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C