Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files (CVE-2009-0583, CVE-2009-0584).

Security update for integer overflows (CVE-2009-0583) and upper bounds checks (CVE-2009-0584) in the ICC profile handling.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files. (CVE-2009-0583 / CVE-2009-0584)

Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript's International Color Consortium Format library (icclib). Using specially crafted ICC profiles, an attacker could create a malicious PostScript or PDF file with embedded images which could cause Ghostscript to crash or, potentially, execute arbitrary code when opened by the victim.

This update fixes several security flaws: CVE-2009-0792 (multiple integer overflows and missing upper-bounds checks in icclib), CVE-2009-0196 (missing boundary check in jbig2dec library), and CVE-2008-6679 (buffer overflow in pdfwrite device).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0051 advisory.

    This advisory aggregates security fixes for the ghostscript SRPM in CIQ LTS 8.6. It addresses 49 CVEs:
    CVE-2016-10220, CVE-2016-7979, CVE-2024-46954, CVE-2017-7207, CVE-2024-46952, and 44 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
36004	openSUSE 10 Security Update : ghostscript-devel (ghostscript-devel-6065)	Nessus	SuSE Local Security Checks	2009/3/24	2021/1/14	high
37905	Fedora 10 : ghostscript-8.63-5.fc10 (2009-2885)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	high
41512	SuSE 10 Security Update : Ghostscript (ZYPP Patch Number 6066)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high
78232	F5 Networks BIG-IP : icclib vulnerabilities (SOL9990)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	high
36166	Fedora 9 : ghostscript-8.63-3.fc9 (2009-3710)	Nessus	Fedora Local Security Checks	2009/4/16	2021/1/11	high
37055	Fedora 10 : ghostscript-8.63-6.fc10 (2009-3709)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	high
357558	Rocky Linux 8.6 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0051)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical

検出

プラグインの検索

high

high

high

high

high

high

critical