diff -up ghostscript-7.05/src/zicc.c.CVE-2008-0411 ghostscript-7.05/src/zicc.c --- ghostscript-7.05/src/zicc.c.CVE-2008-0411 2002-04-10 10:33:26.000000000 +0100 +++ ghostscript-7.05/src/zicc.c 2008-02-19 15:58:00.000000000 +0000 @@ -80,6 +80,9 @@ zseticcspace(i_ctx_t * i_ctx_p) dict_find_string(op, "N", &pnval); ncomps = pnval->value.intval; + if (2*ncomps > sizeof(range_buff)/sizeof(float)) + return_error(e_rangecheck); + /* verify the DataSource entry */ if (dict_find_string(op, "DataSource", &pstrmval) <= 0) return_error(e_undefined);