CVE-2009-0584: argyllcms cms Numeric Errors

EPSS trend

Probability

4.07%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.07% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

42 links

secunia.com/advisories/34381Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/34437Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34393Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2009-098.htmX Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200903-37.xmlVendor AdvisoryX Refsource GENTOO
securitytracker.com/id?1021868VDB EntryX Refsource SECTRACK
secunia.com/advisories/34266Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34443Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-March/msg00916.htmlVendor AdvisoryX Refsource FEDORA

Show all 42 references

www.debian.org/security/2009/dsa-1746Vendor AdvisoryX Refsource DEBIAN
osvdb.org/52988VDB EntryX Refsource OSVDB
www.auscert.org.au/render.html?it=10666Third Party AdvisoryX Refsource AUSCERTUS Government Resource
www.vupen.com/english/advisories/2009/0776VDB EntryX Refsource VUPENVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10544VDB EntrySignatureX Refsource OVAL
www.redhat.com/archives/fedora-package-announce/2009-March/msg00772.htmlVendor AdvisoryX Refsource FEDORA
sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/archives/fedora-package-announce/2009-March/msg00887.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34418Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34729Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/wiki/Advisories:rPSA-2009-0050X Refsource CONFIRM
issues.rpath.com/browse/RPL-2991X Refsource CONFIRM
bugzilla.redhat.com/show_bug.cgi?id=487744X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDVSA-2009:095Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2009/0816VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/34469Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35569Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1708VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/49327VDB EntryX Refsource XF
www.securityfocus.com/bid/34184VDB EntryX Refsource BID
www.mandriva.com/security/advisories?name=MDVSA-2009:096Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/35559Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34373Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34398Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/757-1/Vendor AdvisoryX Refsource UBUNTU
bugs.gentoo.org/show_bug.cgi?id=261087X Refsource CONFIRM
www.redhat.com/support/errata/RHSA-2009-0345.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2009-March/msg00770.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2009/0777VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/501994/100/0/threadedMailing ListX Refsource BUGTRAQ
www.ubuntu.com/usn/USN-743-1Vendor AdvisoryX Refsource UBUNTU
security-tracker.debian.org/tracker/CVE-2009-0584Advisory

Related vulnerabilities

CVE-2007-6725debianghostscript+14.84%17y ago08-04-2009 16:00The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.CVE-2008-0411debianghostscript+814.52%18y ago28-02-2008 21:00Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.CVE-2008-6679debianghostscript+14.50%17y ago08-04-2009 16:00Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.CVE-2012-4405argyllcmscms+97.49%14y ago18-09-2012 17:00Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.CVE-2010-4820debianghostscript+10.47%11y ago27-10-2014 01:00Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.CVE-2009-0792argyllcmsargyllcms+33.99%17y ago14-04-2009 16:00Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.

All vulnerabilities incms ghostscript

CVE-2009-0584: argyllcms cms Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References