CVE ID:	CVE-2009-0583
Description:	Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
Test IDs:	1.3.6.1.4.1.25623.1.0.63656   1.3.6.1.4.1.25623.1.0.63840   1.3.6.1.4.1.25623.1.0.63839   1.3.6.1.4.1.25623.1.0.63835   1.3.6.1.4.1.25623.1.0.63678   1.3.6.1.4.1.25623.1.0.63912   1.3.6.1.4.1.25623.1.0.63782   1.3.6.1.4.1.25623.1.0.64709   1.3.6.1.4.1.25623.1.0.63836   1.3.6.1.4.1.25623.1.0.63873   1.3.6.1.4.1.25623.1.0.63671   1.3.6.1.4.1.25623.1.0.63874   1.3.6.1.4.1.25623.1.0.63780   1.3.6.1.4.1.25623.1.0.63672   1.3.6.1.4.1.25623.1.0.63658   1.3.6.1.4.1.25623.1.0.122510
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0583 AUSCERT Advisory: ESB-2009.0259 http://www.auscert.org.au/render.html?it=10666 BugTraq ID: 34184 http://www.securityfocus.com/bid/34184 Bugtraq: 20090319 rPSA-2009-0050-1 ghostscript (Google Search) http://www.securityfocus.com/archive/1/501994/100/0/threaded Debian Security Information: DSA-1746 (Google Search) http://www.debian.org/security/2009/dsa-1746 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.html http://www.gentoo.org/security/en/glsa/glsa-200903-37.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 http://www.mandriva.com/security/advisories?name=MDVSA-2009:096 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10795 RedHat Security Advisories: RHSA-2009:0345 http://www.redhat.com/support/errata/RHSA-2009-0345.html http://securitytracker.com/id?1021868 http://secunia.com/advisories/34266 http://secunia.com/advisories/34373 http://secunia.com/advisories/34381 http://secunia.com/advisories/34393 http://secunia.com/advisories/34398 http://secunia.com/advisories/34418 http://secunia.com/advisories/34437 http://secunia.com/advisories/34443 http://secunia.com/advisories/34469 http://secunia.com/advisories/34729 http://secunia.com/advisories/35559 http://secunia.com/advisories/35569 http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1 SuSE Security Announcement: SUSE-SR:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html http://www.ubuntu.com/usn/USN-743-1 https://usn.ubuntu.com/757-1/ http://www.vupen.com/english/advisories/2009/0776 http://www.vupen.com/english/advisories/2009/0777 http://www.vupen.com/english/advisories/2009/0816 http://www.vupen.com/english/advisories/2009/1708 XForce ISS Database: ghostscript-icclib-native-color-bo(49329) https://exchange.xforce.ibmcloud.com/vulnerabilities/49329