CVE-2009-0792: argyllcms Numeric Errors

EPSS trend

Probability

3.99%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.99% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.99%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

30 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2009-0421.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.htmlVendor AdvisoryX Refsource FEDORA
security.gentoo.org/glsa/glsa-201412-17.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2009-0420.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-package-announce/2009-April/msg00211.htmlVendor AdvisoryX Refsource FEDORA
bugzilla.redhat.com/show_bug.cgi?id=491853X Refsource CONFIRM
sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1Vendor AdvisoryX Refsource SUNALERT
exchange.xforce.ibmcloud.com/vulnerabilities/50381VDB EntryX Refsource XF
www.securityfocus.com/archive/1/502757/100/0/threadedMailing ListX Refsource BUGTRAQ

Show all 30 references

secunia.com/advisories/34729Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2009-April/msg00217.htmlVendor AdvisoryX Refsource FEDORA
lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDVSA-2009:095Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/34711Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/34732Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/35569Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/1708VDB EntryX Refsource VUPEN
www.mandriva.com/security/advisories?name=MDVSA-2009:096Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/35559Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34373Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/35416Third Party AdvisoryX Refsource SECUNIA
wiki.rpath.com/Advisories:rPSA-2009-0060X Refsource CONFIRM
usn.ubuntu.com/757-1/Vendor AdvisoryX Refsource UBUNTU
support.avaya.com/elmodocs2/security/ASA-2009-155.htmX Refsource CONFIRM
secunia.com/advisories/34726Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/34667Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2009-0792Advisory

Related vulnerabilities

CVE-2007-6725debianghostscript+14.84%17y ago08-04-2009 16:00The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.CVE-2008-0411debianghostscript+814.52%18y ago28-02-2008 21:00Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.CVE-2008-6679debianghostscript+14.50%17y ago08-04-2009 16:00Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.CVE-2012-1616argyllcmsargyllcms+44.79%14y ago21-06-2012 15:00Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.CVE-2012-4405argyllcmscms+97.49%14y ago18-09-2012 17:00Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.CVE-2010-4820debianghostscript+10.47%11y ago27-10-2014 01:00Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.

All vulnerabilities inargyllcms ghostscript

CVE-2009-0792: argyllcms Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References