CVE-2008-6679 Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code....
MediumCVSS 5.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ghostscript | = 8.62 | No fix listed |
| debian/ghostscript(Debian:12) | < 8.64~dfsg-1 | 8.64~dfsg-1 |
| debian/ghostscript(Debian:13) | < 8.64~dfsg-1 | 8.64~dfsg-1 |
| debian/ghostscript(Debian:14) | < 8.64~dfsg-1 | 8.64~dfsg-1 |
References
- bugs.ghostscript.com
- SUSE-SR:2009:011 vendor-advisory
- 34667 third-party-advisory
- 34729 third-party-advisory
- 34732 third-party-advisory
- 35416 third-party-advisory
- 35559 third-party-advisory
- 35569 third-party-advisory
- 262288 vendor-advisory
- wiki.rpath.com
- MDVSA-2009:095 vendor-advisory
- [oss-security] 20090401 CVE request -- ghostscript mailing-list
- RHSA-2009:0421 vendor-advisory
- 20090417 rPSA-2009-0060-1 ghostscript mailing-list
- ADV-2009-1708 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:10019 signature vdb-entry
- USN-757-1 vendor-advisory
- FEDORA-2009-3709 vendor-advisory
- FEDORA-2009-3710 vendor-advisory
- Debian Security Tracker CVE-2008-6679 vendor-advisory
- bugs.debian.org issue-tracking