CVE-2012-4405: argyllcms cms Numeric Errors

EPSS trend

Probability

7.49%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.49% on 19-09-2026

19-09-202619-10-2026

EPSS score

7.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

23 links

rhn.redhat.com/errata/RHSA-2012-1256.htmlVendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-201412-17.xmlVendor AdvisoryX Refsource GENTOO
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0301X Refsource CONFIRM
www.openwall.com/lists/oss-security/2012/09/11/2Mailing ListX Refsource MLIST
lists.opensuse.org/opensuse-updates/2012-10/msg00015.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDVSA-2013:089Vendor AdvisoryX Refsource MANDRIVA
www.mandriva.com/security/advisories?name=MDVSA-2013:090Vendor AdvisoryX Refsource MANDRIVA
www.securityfocus.com/bid/55494VDB EntryX Refsource BID
secunia.com/advisories/50719Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2012-09/msg00031.htmlVendor AdvisoryX Refsource SUSE

Show all 23 references

lists.opensuse.org/opensuse-security-announce/2012-10/msg00001.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/78411VDB EntryX Refsource XF
www.securitytracker.com/id?1027517VDB EntryX Refsource SECTRACK
www.ubuntu.com/usn/USN-1581-1Vendor AdvisoryX Refsource UBUNTU
www.mandriva.com/security/advisories?name=MDVSA-2012:151Vendor AdvisoryX Refsource MANDRIVA
access.redhat.com/errata/RHSA-2012:1256Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=854227REPORT
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1256.jsonAdvisory
access.redhat.com/security/cve/CVE-2012-4405REPORT
www.cve.org/CVERecord?id=CVE-2012-4405Advisory
nvd.nist.gov/vuln/detail/CVE-2012-4405Advisory
security-tracker.debian.org/tracker/CVE-2012-4405Advisory

Related vulnerabilities

CVE-2007-6725debianghostscript+14.84%17y ago08-04-2009 16:00The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.CVE-2008-0411debianghostscript+814.52%18y ago28-02-2008 21:00Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.CVE-2008-6679debianghostscript+14.50%17y ago08-04-2009 16:00Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.CVE-2012-1616argyllcmsargyllcms+44.79%14y ago21-06-2012 15:00Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.CVE-2010-4820debianghostscript+10.47%11y ago27-10-2014 01:00Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.CVE-2009-0792argyllcmsargyllcms+33.99%17y ago14-04-2009 16:00Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.

All vulnerabilities incms icclib ghostscript

CVE-2012-4405: argyllcms cms Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References