9.3 - CVE-2009-0792

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2009-0792	First vendor Publication	2009-04-14
Vendor	Cve	Last vendor Modification	2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11207

Oval ID:	oval:org.mitre.oval:def:11207
Title:	Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
Description:	Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0792	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section hpijs is earlier than 0:7.05-32.1.20 AND ghostscript-devel is earlier than 0:7.05-32.1.20 AND ghostscript is earlier than 0:7.05-32.1.20 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section ghostscript-devel is earlier than 0:7.07-33.2.el4_7.8 AND ghostscript is earlier than 0:7.07-33.2.el4_7.8 AND ghostscript-gtk is earlier than 0:7.07-33.2.el4_7.8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7

Definition Id: oval:org.mitre.oval:def:22480

Oval ID:	oval:org.mitre.oval:def:22480
Title:	ELSA-2009:0421: ghostscript security update (Moderate)
Description:	Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:0421-01 CVE-2007-6725 CVE-2008-6679 CVE-2009-0196 CVE-2009-0792	Version:	21
Platform(s):	Oracle Linux 5	Product(s):	ghostscript
Definition Synopsis:
Oracle Linux 5.x rpm test ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7

Definition Id: oval:org.mitre.oval:def:29276

Oval ID:	oval:org.mitre.oval:def:29276
Title:	RHSA-2009:0421 -- ghostscript security update (Moderate)
Description:	Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files.
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:0421 CESA-2009:0421-CentOS 5 CVE-2007-6725 CVE-2008-6679 CVE-2009-0196 CVE-2009-0792	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	ghostscript
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section ghostscript-devel is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript is earlier than 0:8.15.2-9.4.el5_3.7 AND ghostscript-gtk is earlier than 0:8.15.2-9.4.el5_3.7

CPE : Common Platform Enumeration

Type	Description	Count
Application	Argyllcms cpe:2.3:a:argyllcms:argyllcms:1.0.3:::::::* cpe:2.3:a:argyllcms:argyllcms:1.0.2:::::::* cpe:2.3:a:argyllcms:argyllcms:1.0.0:::::::* cpe:2.3:a:argyllcms:argyllcms:0.7.0:beta_8:::::: cpe:2.3:a:argyllcms:argyllcms:0.6.0:::::::* cpe:2.3:a:argyllcms:argyllcms:0.3.0:::::::* cpe:2.3:a:argyllcms:argyllcms:0.2.2:::::::* cpe:2.3:a:argyllcms:argyllcms:0.2.1:::::::* cpe:2.3:a:argyllcms:argyllcms:0.2.0:::::::* cpe:2.3:a:argyllcms:argyllcms:0.1.0:::::::*	10
Application	Ghostscript cpe:2.3:a:ghostscript:ghostscript:8.64:::::::* cpe:2.3:a:ghostscript:ghostscript:8.63:::::::* cpe:2.3:a:ghostscript:ghostscript:8.62:::::::* cpe:2.3:a:ghostscript:ghostscript:8.61:::::::* cpe:2.3:a:ghostscript:ghostscript:8.60:::::::* cpe:2.3:a:ghostscript:ghostscript:8.57:::::::* cpe:2.3:a:ghostscript:ghostscript:8.56:::::::* cpe:2.3:a:ghostscript:ghostscript:8.54:::::::* cpe:2.3:a:ghostscript:ghostscript:8.15.2:::::::* cpe:2.3:a:ghostscript:ghostscript:8.15:::::::* cpe:2.3:a:ghostscript:ghostscript:8.0.1:::::::* cpe:2.3:a:ghostscript:ghostscript:7.07:::::::* cpe:2.3:a:ghostscript:ghostscript:7.05:::::::* cpe:2.3:a:ghostscript:ghostscript:5.50:::::::* cpe:2.3:a:ghostscript:ghostscript:0:::::::* cpe:2.3:a:ghostscript:ghostscript::::::::	16

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for ghostscript CESA-2009:0420 centos3 i386 File : nvt/gb_CESA-2009_0420_ghostscript_centos3_i386.nasl
2011-08-09	Name : CentOS Update for ghostscript CESA-2009:0420 centos4 i386 File : nvt/gb_CESA-2009_0420_ghostscript_centos4_i386.nasl
2011-08-09	Name : CentOS Update for ghostscript CESA-2009:0421 centos5 i386 File : nvt/gb_CESA-2009_0421_ghostscript_centos5_i386.nasl
2010-08-21	Name : Debian Security Advisory DSA 2080-1 (ghostscript) File : nvt/deb_2080_1.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:311 (ghostscript) File : nvt/mdksa_2009_311.nasl
2009-10-13	Name : SLES10: Security update for GhostScript File : nvt/sles10_ghostscript-fon.nasl
2009-10-13	Name : Solaris Update for Ghostscript 115835-05 File : nvt/gb_solaris_115835_05.nasl
2009-10-13	Name : Solaris Update for Ghostscript 115836-05 File : nvt/gb_solaris_115836_05.nasl
2009-10-11	Name : SLES11: Security update for GhostScript File : nvt/sles11_ghostscript-fon1.nasl
2009-10-11	Name : SLES11: Security update for Ghostscript File : nvt/sles11_ghostscript-fon0.nasl
2009-10-10	Name : SLES9: Security update for GhostScript File : nvt/sles9p5049760.nasl
2009-09-23	Name : Solaris Update for SunFreeware ghostscript man pages 122262-02 File : nvt/gb_solaris_122262_02.nasl
2009-09-23	Name : Solaris Update for SunFreeware ghostscript man pages 122261-02 File : nvt/gb_solaris_122261_02.nasl
2009-09-23	Name : Solaris Update for SunFreeware gnu esp ghostscript 122260-02 File : nvt/gb_solaris_122260_02.nasl
2009-09-23	Name : Solaris Update for SunFreeware gnu esp ghostscript 122259-02 File : nvt/gb_solaris_122259_02.nasl
2009-06-15	Name : SuSE Security Summary SUSE-SR:2009:011 File : nvt/suse_sr_2009_011.nasl
2009-05-25	Name : CentOS Security Advisory CESA-2009:0420 (ghostscript) File : nvt/ovcesa2009_0420.nasl
2009-05-05	Name : Mandrake Security Advisory MDVSA-2009:096-1 (printer-drivers) File : nvt/mdksa_2009_096_1.nasl
2009-04-28	Name : Ghostscript Multiple Buffer Overflow Vulnerabilities (Linux) File : nvt/secpod_ghostscript_mult_bof_vuln_lin.nasl
2009-04-28	Name : Ghostscript Multiple Buffer Overflow Vulnerabilities (Win) File : nvt/secpod_ghostscript_mult_bof_vuln_win.nasl
2009-04-28	Name : SuSE Security Summary SUSE-SR:2009:009 File : nvt/suse_sr_2009_009.nasl
2009-04-28	Name : Mandrake Security Advisory MDVSA-2009:095 (ghostscript) File : nvt/mdksa_2009_095.nasl
2009-04-28	Name : Mandrake Security Advisory MDVSA-2009:096 (printer-drivers) File : nvt/mdksa_2009_096.nasl
2009-04-20	Name : Ubuntu USN-757-1 (gs-gpl) File : nvt/ubuntu_757_1.nasl
2009-04-20	Name : Fedora Core 10 FEDORA-2009-3740 (argyllcms) File : nvt/fcore_2009_3740.nasl
2009-04-20	Name : Fedora Core 9 FEDORA-2009-3720 (argyllcms) File : nvt/fcore_2009_3720.nasl
2009-04-20	Name : Fedora Core 9 FEDORA-2009-3710 (ghostscript) File : nvt/fcore_2009_3710.nasl
2009-04-20	Name : Fedora Core 10 FEDORA-2009-3709 (ghostscript) File : nvt/fcore_2009_3709.nasl
2009-04-15	Name : Fedora Core 10 FEDORA-2009-3435 (argyllcms) File : nvt/fcore_2009_3435.nasl
2009-04-15	Name : Fedora Core 9 FEDORA-2009-3430 (argyllcms) File : nvt/fcore_2009_3430.nasl
2009-04-15	Name : RedHat Security Advisory RHSA-2009:0421 File : nvt/RHSA_2009_0421.nasl
2009-04-15	Name : RedHat Security Advisory RHSA-2009:0420 File : nvt/RHSA_2009_0420.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-181-01 ghostscript File : nvt/esoft_slk_ssa_2009_181_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
56412	International Color Consortium (ICC) Format library (icclib) Native Color Spa...

Nessus® Vulnerability Scanner

Date	Description
2014-12-15	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201412-17.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0421.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-0420.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090414_ghostscript_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2010-08-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2080.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0421.nasl - Type : ACT_GATHER_INFO
2009-12-04	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-311.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_ghostscript-fonts-other-6245.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_ghostscript-devel-090513.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_ghostscript-devel-090407.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12417.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_1_ghostscript-devel-090514.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_ghostscript-devel-090513.nasl - Type : ACT_GATHER_INFO
2009-06-30	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-181-01.nasl - Type : ACT_GATHER_INFO
2009-05-18	Name : The remote openSUSE host is missing a security update. File : suse_ghostscript-devel-6246.nasl - Type : ACT_GATHER_INFO
2009-04-27	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-095.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-757-1.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-3740.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-3709.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2009-3435.nasl - Type : ACT_GATHER_INFO
2009-04-21	Name : The remote Fedora host is missing a security update. File : fedora_2009-3720.nasl - Type : ACT_GATHER_INFO
2009-04-16	Name : The remote Fedora host is missing a security update. File : fedora_2009-3710.nasl - Type : ACT_GATHER_INFO
2009-04-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0420.nasl - Type : ACT_GATHER_INFO
2009-04-15	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-0420.nasl - Type : ACT_GATHER_INFO
2009-04-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-0421.nasl - Type : ACT_GATHER_INFO
2009-04-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-3430.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BUGTRAQ	http://www.securityfocus.com/archive/1/502757/100/0/threaded
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm http://wiki.rpath.com/Advisories:rPSA-2009-0060 https://bugzilla.redhat.com/show_bug.cgi?id=491853
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html
GENTOO	http://security.gentoo.org/glsa/glsa-201412-17.xml
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 http://www.mandriva.com/security/advisories?name=MDVSA-2009:096
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2009-0420.html http://www.redhat.com/support/errata/RHSA-2009-0421.html
SECUNIA	http://secunia.com/advisories/34373 http://secunia.com/advisories/34667 http://secunia.com/advisories/34711 http://secunia.com/advisories/34726 http://secunia.com/advisories/34729 http://secunia.com/advisories/34732 http://secunia.com/advisories/35416 http://secunia.com/advisories/35559 http://secunia.com/advisories/35569
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
UBUNTU	https://usn.ubuntu.com/757-1/
VUPEN	http://www.vupen.com/english/advisories/2009/1708
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/50381

Alert History

If you want to see full details history, please login or register.

Date	Informations
2023-11-07 21:47:44	Multiple Updates
2023-02-13 09:29:20	Multiple Updates
2021-05-05 01:05:45	Multiple Updates
2021-05-04 12:09:13	Multiple Updates
2021-04-22 01:09:34	Multiple Updates
2020-05-24 01:05:37	Multiple Updates
2020-05-23 01:40:07	Multiple Updates
2020-05-23 00:23:27	Multiple Updates
2018-10-11 00:19:32	Multiple Updates
2018-10-04 00:19:35	Multiple Updates
2017-09-29 09:24:06	Multiple Updates
2017-08-17 09:22:29	Multiple Updates
2016-04-26 18:40:45	Multiple Updates
2015-01-07 09:24:04	Multiple Updates
2014-12-16 13:24:30	Multiple Updates
2014-02-17 10:49:05	Multiple Updates
2013-05-10 23:45:30	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	3
CPE ID(s)	26
Sources(s)	29
osvdb(s)	1
Openvas Exploit(s)	33
Nessus® Exploit(s)	26

	Related
10	MDVSA-2009:311
9.3	USN-757-1
9.3	SUN-262288
9.3	RHSA-2009:0421
9.3	RHSA-2009:0420
9.3	MDVSA-2009:096-1
9.3	MDVSA-2009:096
9.3	MDVSA-2009:095
9.3	GLSA-201412-17
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 9 more Alert(s)