Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ghostscript多个输入验证和整数溢出漏洞
Vulnerability Description
Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript， Argyll Color Management System的ICC格式库(icclib)中存在多个可导致堆溢出的整数溢出，以及多个不充分输入验证错误。攻击者可以使用设备文件处理携带某个尺寸超大整数值的图片文件就会导致Ghostscript崩溃或执行任意代码，该漏洞与嵌入图片的(1)PostScript(2)PDF文件ICC配置相关。
CVSS Information
N/A
Vulnerability Type
N/A