GCVE - cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:argyllcms:argyllcms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Argyllcms (`85d46595-9bbf-5429-b5d3-664ef6f9dd8c`)
Product	Argyllcms (`b4e3038e-601f-5084-932d-c3b20025f741`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/iiontihy/argyllcms`	purl2cpe	2026-06-01 10:12:30.104183
`pkg:github/rfujita/hargyllcms`	purl2cpe	2026-06-01 10:12:30.104185
`pkg:rpm/fedora/argyllcms`	purl2cpe	2026-06-01 10:12:30.104188
`pkg:rpm/opensuse/argyllcms`	purl2cpe	2026-06-01 10:12:30.104191

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1616`	vulnerable	2026-06-08 05:00:49.923906	Details available Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file. Published: 2012-06-21T15:00:00.000Z Updated: 2024-08-06T19:01:02.748Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/75162 http://secunia.com/advisories/48921 https://bugzilla.redhat.com/show_bug.cgi?id=809697 http://www.osvdb.org/81617 http://www.argyllcms.com/icc_readme.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0792`	vulnerable	2026-06-08 04:51:11.367899	Details available Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583. Published: 2009-04-14T16:00:00.000Z Updated: 2024-08-07T04:48:52.258Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11207 http://www.redhat.com/support/errata/RHSA-2009-0421.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html http://security.gentoo.org/glsa/glsa-201412-17.xml http://www.redhat.com/support/errata/RHSA-2009-0420.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0583`	vulnerable	2026-06-08 04:51:10.163157	Details available Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. Published: 2009-03-23T19:26:00.000Z Updated: 2024-08-07T04:40:05.059Z Open on db.gcve.eu Reference links http://secunia.com/advisories/34381 http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html http://secunia.com/advisories/34437 http://secunia.com/advisories/34393 http://support.avaya.com/elmodocs2/security/ASA-2009-098.htm	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.