AskF5 Knowledge Base

Applies To:

Show Versions Show Versions
sol9990: icclib vulnerabilities CVE-2009-0583 and CVE-2009-0584
Security AdvisorySecurity Advisory

Original Publication Date: 04/21/2009
Updated Date: 02/08/2012

Note: Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about F5's security policy regarding evaluating older and unsupported versions of F5 products, refer to SOL4602: Overview of F5 security vulnerability response policy.

F5 Networks products and versions that have been evaluated for this Security Advisory

Product Affected Not Affected
BIG-IP LTM 10.0.0 9.x
10.0.1
10.1.x
10.2.x
11.x
BIG-IP GTM 10.0.0 9.x
10.0.1
10.1.x
10.2.x 
11.x
BIG-IP ASM 10.0.0   9.x
10.0.1
10.1.x
10.2.x 
11.x
BIG-IP Link Controller 10.0.0   9.x
10.0.1
10.1.x
10.2.x 
11.x
BIG-IP WebAccelerator 10.0.0   9.x
10.0.1 
10.1.0 
10.2.x
11.x
BIG-IP PSM 10.0.0   9.x
10.0.1
10.1.x
10.2.x 
11.x
BIG-IP WAN Optimization 10.0.0   10.0.1 
10.1.x
10.2.x 
11.x
BIG-IP APM None 10.1.x
10.2.x
11.x 
BIG-IP Edge Gateway None 10.1.x
10.2.x
11.x 
BIG-IP Analytics None 11.x
FirePass None 5.x
6.x
7.x 
Enterprise Manager None 1.x
2.x 
WANJet None 4.x
5.x
WebAccelerator None  5.x
ARX None  2.x
3.x
4.x
5.x
6.x

Description

Multiple integer overflow flaws which could lead to heap-based buffer overflows, as well as multiple insufficient input validation flaws, were found in Ghostscript's International Color Consortium Format library (icclib). Using specially-crafted ICC profiles, an attacker could create a malicious PostScript or PDF file with embedded images which could cause Ghostscript to crash or, potentially, execute arbitrary code when opened by the victim.

Information about this advisory is available at the following locations:

Note: These links take you to a resource outside of AskF5, and it is possible that the documents may be removed without our knowledge.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584

F5 Product Development tracked this issue as CR118548 and CR119796 and it was fixed in BIG-IP versions 9.4.7 and 10.0.1. For more information about upgrading, refer to the BIG-IP LTM, ASM, GTM, Link Controller, PSM, or WebAccelerator release notes.

Additionally, this issue was fixed in BIGIP-10.0.0-5514.0-HF2 for BIG-IP version 10.0.0. You may download this hotfix or later versions of the hotfix from the F5 Downloads site.

To view a list of the latest available hotfixes, refer to SOL9502: BIG-IP hotfix matrix.

For information about installing a hotfix, refer to SOL10025: Managing F5 product hotfixes for BIG-IP version 10.x systems.

For information about the F5 hotfix policy, refer to SOL4918: Overview of F5 critical issue hotfix policy.

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)