REDHAT-BUG-487744: Medium severity Ghostscript International Color Consortium Format Library vulnerability

Published Feb 27, 2009

Updated

Multiple insufficient upper-bounds checks on certain sizes were found in the Ghostscript's International Color Consortium Format Library (icclib). An attacker could use this flaw to potentially execute arbitrary code by providing a specially-crafted image file for processing via the Ghotstscript's device file.

Affected Software

1 affected component

Ghostscript International Color Consortium Format Library

Event History

Feb 27, 2009

Data Sourced

06:28 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-487744?

The severity of REDHAT-BUG-487744 is considered high due to the potential for arbitrary code execution.

How do I fix REDHAT-BUG-487744?

To fix REDHAT-BUG-487744, ensure that you update to the latest version of the Ghostscript software that addresses the vulnerability.

What is the impact of REDHAT-BUG-487744?

The impact of REDHAT-BUG-487744 includes the risk of an attacker executing arbitrary code on affected systems.

Which software is affected by REDHAT-BUG-487744?

REDHAT-BUG-487744 affects the Ghostscript International Color Consortium Format Library (icclib).

Is remote exploitation possible with REDHAT-BUG-487744?

Yes, an attacker could remotely exploit REDHAT-BUG-487744 by sending a specially-crafted image file to the Ghostscript software.