Artifex Ghostscript vulnerabilities

CVE-2007-6725 [HIGH] CVE-2007-6725: The CCITTFax decoding filter in Ghostscript 8 The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.

CVE-2008-6679 [MEDIUM] CVE-2008-6679: Buffer overflow in the BaseFont writer module in Ghostscript 8 Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.

CVE-2009-0584 [CRITICAL] CVE-2009-0584: icc icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes, related to an ICC profile in a (1) PostScri

CVE-2009-0583 [CRITICAL] CVE-2009-0583: Multiple integer overflows in icc Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a

CVE-2008-3522 [CRITICAL] CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf.

CVE-2008-3520 [CRITICAL] CVE-2008-3520: Multiple integer overflows in JasPer 1 Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, related to integer multiplication for memory allocation.

CVE-2008-0411 [MEDIUM] CVE-2008-0411: Stack-based buffer overflow in the zseticcspace function in zicc Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

CVE-2007-2721 [MEDIUM] CVE-2007-2721: The jpc_qcx_getcompparms function in jpc/jpc_cs The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed image files, as originally demonstrated using imagemagick convert.