FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Commit found by message id
Mon, 20 Apr 2009
[ 08:08:50 hrs ] Original commit 
ghostscript8 print files touched by this commit  An older version of this port was marked as vulnerable. Ghostscript 8.x PostScript interpreter
Fix multiple integer overflows and lack of boundary check found
and marked as CVE-2009-583 and CVE-2009-584:

CVE-2009-583:

  Multiple integer overflows in icc.c in the International Color
  Consortium (ICC) Format library (aka icclib), as used in
  Ghostscript 8.64 and earlier and Argyll Color Management
  System (CMS) 1.0.3 and earlier, allow context-dependent
  attackers to cause a denial of service (heap-based buffer
  overflow and application crash) or possibly execute arbitrary
  code by using a device file for a translation request that
  operates on a crafted image file and targets a certain "native
  color space," related to an ICC profile in a (1) PostScript
  or (2) PDF file with embedded images.

CVE-2009-584:

  icc.c in the International Color Consortium (ICC) Format
  library (aka icclib), as used in Ghostscript 8.64 and earlier
  and Argyll Color Management System (CMS) 1.0.3 and earlier,
  allows context-dependent attackers to cause a denial of
  service (application crash) or possibly execute arbitrary code
  by using a device file for processing a crafted image file
  associated with large integer values for certain sizes, related
  to an ICC profile in a (1) PostScript or (2) PDF file with
  embedded images.

Security:       CVE-2009-583
Security:       CVE-2009-584
Approved by:    portmgr (pav)

Number of ports [& non-ports] in this commit: 1

show all files

Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
bugzilla40*Apr 18
bugzilla40*Apr 18
bugzilla42*Apr 18
bugzilla42*Apr 18
bugzilla44*Apr 18
bugzilla44*Apr 18
curlApr 11
dbus-glibApr 11
libaudiofileApr 11
linux-f10-curlApr 11
linux-f10-dbus-glibApr 11
linux-f10-libaudiofileApr 11
linux-f10-nas-libsApr 11
linux-f10-openldapApr 11
mingw32-openssl*Apr 11

13 vulnerabilities affecting 18 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24367
Broken 183
Deprecated 90
Ignore 537
Forbidden 6
Restricted 263
No CDROM 108
Vulnerable 29
Expired 8
Set to expire 77
Interactive 22
new 24 hours 1
new 48 hours2
new 7 days15
new fortnight39
new month142


Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.