CVE-2012-4405 ghostscript, argyllcms: Array index error leading to heap-based bufer OOB write

[Huzaifa Sidhpurwala <huzaifas () redhat com>]

Hi All,

An array index error leading to heap-based buffer out-of-buffer bounds
write flaw was found in the way International Color Consortium (ICC)
Format library (aka icclib) as used in Ghostscript and Argyll Color
Management System computed dimensional increment through the clut based
on the count of input channels.

This issue was reported by Marc Schönefeld

It seems that the upstream version of ghostscript no longer uses
embedded icclib so they are not affected.

Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=854227
Patch: https://bugzilla.redhat.com/attachment.cgi?id=609986


-- 
Huzaifa Sidhpurwala / Red Hat Security Response Team