CVE-2008-0411 Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range...
MediumCVSS 6.8
EPSS 14.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ghostscript | <= 8.61 | No fix listed |
| ghostscript | = 0 | No fix listed |
| ghostscript | = 8.0.1 | No fix listed |
| ghostscript | = 8.15 | No fix listed |
| debian/ghostscript(Debian:12) | < 8.61.dfsg.1-1.1 | 8.61.dfsg.1-1.1 |
| debian/ghostscript(Debian:13) | < 8.61.dfsg.1-1.1 | 8.61.dfsg.1-1.1 |
| debian/ghostscript(Debian:14) | < 8.61.dfsg.1-1.1 | 8.61.dfsg.1-1.1 |
References
- Debian Security Tracker CVE-2008-0411 vendor-advisory
- bugs.debian.org issue-tracking
- SUSE-SA:2008:010 mailing-list third-party-advisory vendor-advisory
- scary.beasts.org exploit
- 29101 third-party-advisory url-repurposed
- 29103 third-party-advisory url-repurposed
- 29112 third-party-advisory url-repurposed
- 29135 third-party-advisory url-repurposed
- 29147 third-party-advisory url-repurposed
- 29154 third-party-advisory url-repurposed
- 29169 third-party-advisory url-repurposed
- 29196 third-party-advisory url-repurposed
- 29314 third-party-advisory url-repurposed
- 29768 third-party-advisory url-repurposed
- SSA:2008-062-01 mailing-list vendor-advisory
- wiki.rpath.com broken-link
- DSA-1510 patch vendor-advisory
- GLSA-200803-14 patch vendor-advisory
- MDVSA-2008:055 third-party-advisory vendor-advisory
- RHSA-2008:0155 url-repurposed vendor-advisory
- 20080228 rPSA-2008-0082-1 espgs broken-link mailing-list vdb-entry
- 20080228 Ghostscript buffer overflow broken-link mailing-list vdb-entry
- 28017 third-party-advisory vdb-entry
- 1019511 third-party-advisory vdb-entry
- USN-599-1 third-party-advisory vendor-advisory
- ADV-2008-0693 not-applicable vdb-entry
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:9557 broken-link signature vdb-entry
- FEDORA-2008-1998 release-notes third-party-advisory vendor-advisory