CVE-2012-4405

CVE-2012-4405 describes multiple integer underflows in the icmLut_allocate function within the International Color Consortium (ICC) Format library (icclib), affecting Ghostscript 9.06 and Argyll Color Management System. This vulnerability allows remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code through a heap-based buffer overflow when processing crafted PostScript or PDF files with embedded images. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, requiring medium attack complexity but allowing unauthenticated network access to achieve partial confidentiality, integrity, and availability impacts. While the FAUCET Risk Score is high at 94/100, there is no evidence of active exploitation, no known exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage.