CVE-2009-0584 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-0584 Interim 1 13 2023-12-09T02:05:51Z current 2021-05-30T12:45:55Z 2023-12-09T02:05:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-0584 icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NOZXT5CRBFF3XA2BV65LMEOU4RCEEGD5/#NOZXT5CRBFF3XA2BV65LMEOU4RCEEGD5 E-Mail link for SUSE-SR:2009:007 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-devel-8.62-32.34.1 ghostscript-fonts-other-8.62-32.22.2 ghostscript-fonts-other-8.62-32.27.31 ghostscript-fonts-other-8.62-32.28.1 ghostscript-fonts-other-8.62-32.34.1 ghostscript-fonts-rus-8.62-32.22.2 ghostscript-fonts-rus-8.62-32.27.31 ghostscript-fonts-rus-8.62-32.28.1 ghostscript-fonts-rus-8.62-32.34.1 ghostscript-fonts-std-8.62-32.22.2 ghostscript-fonts-std-8.62-32.27.31 ghostscript-fonts-std-8.62-32.28.1 ghostscript-fonts-std-8.62-32.34.1 ghostscript-ijs-devel-8.62-32.34.1 ghostscript-library-8.62-32.22.2 ghostscript-library-8.62-32.27.31 ghostscript-library-8.62-32.28.1 ghostscript-library-8.62-32.34.1 ghostscript-omni-8.62-32.22.2 ghostscript-omni-8.62-32.27.31 ghostscript-omni-8.62-32.28.1 ghostscript-omni-8.62-32.34.1 ghostscript-x11-8.62-32.22.2 ghostscript-x11-8.62-32.27.31 ghostscript-x11-8.62-32.28.1 ghostscript-x11-8.62-32.34.1 libgimpprint-4.2.7-32.22.2 libgimpprint-4.2.7-32.27.31 libgimpprint-4.2.7-32.28.1 libgimpprint-4.2.7-32.34.1 libgimpprint-devel-4.2.7-32.34.1 ghostscript-fonts-other-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-rus-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-std-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-library-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-omni-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-x11-8.62-32.22.2 as a component of SUSE Linux Enterprise Server 11 libgimpprint-4.2.7-32.22.2 as a component of SUSE Linux Enterprise Server 11 ghostscript-fonts-other-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-rus-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-std-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-library-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-omni-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-x11-8.62-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 libgimpprint-4.2.7-32.27.31 as a component of SUSE Linux Enterprise Server 11 SP1 ghostscript-fonts-other-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-rus-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-std-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-library-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-omni-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-x11-8.62-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 libgimpprint-4.2.7-32.28.1 as a component of SUSE Linux Enterprise Server 11 SP2 ghostscript-fonts-other-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-rus-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-std-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-library-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-omni-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-x11-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 libgimpprint-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP3 ghostscript-fonts-other-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-rus-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-std-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-library-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-omni-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-x11-8.62-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 libgimpprint-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Server 11 SP4 ghostscript-fonts-other-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-fonts-rus-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-fonts-std-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-library-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-omni-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-x11-8.62-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 libgimpprint-4.2.7-32.22.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 ghostscript-devel-8.62-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ghostscript-ijs-devel-8.62-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 libgimpprint-devel-4.2.7-32.34.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. CVE-2009-0584 SUSE Linux Enterprise Server 11:ghostscript-fonts-other-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-fonts-rus-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-fonts-std-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-library-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-omni-8.62-32.22.2 SUSE Linux Enterprise Server 11:ghostscript-x11-8.62-32.22.2 SUSE Linux Enterprise Server 11:libgimpprint-4.2.7-32.22.2 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-other-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-rus-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-fonts-std-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-library-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-omni-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:ghostscript-x11-8.62-32.27.31 SUSE Linux Enterprise Server 11 SP1:libgimpprint-4.2.7-32.27.31 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-other-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-rus-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-fonts-std-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-library-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-omni-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:ghostscript-x11-8.62-32.28.1 SUSE Linux Enterprise Server 11 SP2:libgimpprint-4.2.7-32.28.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-other-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-rus-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-fonts-std-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-library-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-omni-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:ghostscript-x11-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP3:libgimpprint-4.2.7-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-other-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-rus-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-fonts-std-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-library-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-omni-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:ghostscript-x11-8.62-32.34.1 SUSE Linux Enterprise Server 11 SP4:libgimpprint-4.2.7-32.34.1 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-other-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-rus-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-fonts-std-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-library-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-omni-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:ghostscript-x11-8.62-32.22.2 SUSE Linux Enterprise Server for SAP Applications 11:libgimpprint-4.2.7-32.22.2 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-devel-8.62-32.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:ghostscript-ijs-devel-8.62-32.34.1 SUSE Linux Enterprise Software Development Kit 11 SP4:libgimpprint-devel-4.2.7-32.34.1 critical 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C