| Package | Affected versions | Patched versions |
|---|---|---|
| cms | ≤ 1.0.3 | |
| ghostscript | = 0= 5.50= 7.05= 7.07= 8.0.1= 8.15= 8.15.2= 8.54= 8.56= 8.57= 8.60= 8.61≤ 8.64 |
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free