Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2012-4405

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Artifex Software Ghostscript是美国Artifex Software公司的一款开源的PostScript（一种用于电子产业和桌面出版领域的页面描述语言和编程语言）解析器。该产品可显示Postscript文件以及在非Postscript打印机上打印Postscript文件。 Artifex Software Ghostscript 9.06版本和Argyll Color Management System 存在数字错误漏洞。该漏洞源于International Color Cons

AI Predicted 9.8 Difficulty: Easy EPSS 7.49% · P94 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1201 · Password Policy Discovery

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2012-4405

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Artifex Software Ghostscript 数字错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-4405

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2012-4405

请登录查看更多情报信息。

Vendor Advisories for CVE-2012-4405 (11)

🔗 Support/Advisories/MGASA-2012-0301 - Mageia wiki Read full article x_refsource_CONFIRM
🔗 http://www.securityfocus.com/bid/55494 vdb-entry x_refsource_BID
🔗 http://secunia.com/advisories/50719 third-party-advisory x_refsource_SECUNIA
🔗 http://www.securitytracker.com/id?1027517 vdb-entry x_refsource_SECTRACK
http://www.ubuntu.com/usn/USN-1581-1 vendor-advisory x_refsource_UBUNTU
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2013:089 vendor-advisory x_refsource_MANDRIVA
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2012:151 vendor-advisory x_refsource_MANDRIVA
🔗 http://www.mandriva.com/security/advisories?name=MDVSA-2013:090 vendor-advisory x_refsource_MANDRIVA
🔗 http://rhn.redhat.com/errata/RHSA-2012-1256.html vendor-advisory x_refsource_REDHAT
🔗 http://security.gentoo.org/glsa/glsa-201412-17.xml vendor-advisory x_refsource_GENTOO
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/78411 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2012-4405 (4)

🔗 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00031.html vendor-advisory x_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-updates/2012-10/msg00015.html vendor-advisory x_refsource_SUSE
🔗 http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00001.html vendor-advisory x_refsource_SUSE
🔗 http://www.openwall.com/lists/oss-security/2012/09/11/2 mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2012-4405

Same Patch Batch · n/a · 2012-09-18 · 24 CVEs total

CVE-2012-3524		libdbus 权限许可和访问控制问题漏洞
CVE-2012-2994		CoSoSys Endpoint Protector 可预测密码生成漏洞
CVE-2012-2993		Microsoft Windows Phone 7 加密问题漏洞
CVE-2012-4969		Microsoft Internet Explorer ‘CMshtmlEd::Exec’函数释放后使用漏洞
CVE-2012-3034		Siemens SIMATIC WinCC 信息泄露漏洞
CVE-2012-3032		Siemens SIMATIC WinCC SQL注入漏洞
CVE-2012-3031		Siemens SIMATIC WinCC 多个跨站脚本漏洞
CVE-2012-3030		Siemens SIMATIC WinCC 权限许可和访问控制漏洞
CVE-2012-3028		Siemens SIMATIC WinCC 跨站请求伪造漏洞
CVE-2012-4425		libgio 权限许可和访问控制问题漏洞
CVE-2012-4413		OpenStack Keystone 权限许可和访问控制问题漏洞
CVE-2012-3547		FreeRADIUS 多个基于栈的缓冲区溢出漏洞
CVE-2012-1654		Drupal ‘Data’模块跨站脚本漏洞
CVE-2012-1901		FlexCMS 多个跨站请求伪造漏洞
CVE-2012-1184		Asterisk 缓冲区溢出漏洞
CVE-2012-1183		Asterisk 远程拒绝服务漏洞
CVE-2011-4941		Piwik 任意代码执行漏洞
CVE-2012-1660		Drupal ‘Webform’模块多个跨站脚本漏洞
CVE-2012-1659		Drupal ‘Node Recommendation’模块跨站脚本漏洞
CVE-2012-1658		Drupal ‘Read More Link’模块跨站脚本漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-4405

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2012-4405

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2012-4405

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-4405

III. Intelligence Information for CVE-2012-4405

Vendor Advisories for CVE-2012-4405 (11)

Mailing List Discussions for CVE-2012-4405 (4)

Same Patch Batch · n/a · 2012-09-18 · 24 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2012-4405

Leave a comment