CVE-2010-1869 Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.
HighCVSS 9.3
EPSS 9.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artifex gpl ghostscript | = 8.64 | No fix listed |
| artifex gpl ghostscript | = 8.70 | No fix listed |
| debian/ghostscript(Debian:12) | < 8.71~dfsg-4 | 8.71~dfsg-4 |
| debian/ghostscript(Debian:13) | < 8.71~dfsg-4 | 8.71~dfsg-4 |
| debian/ghostscript(Debian:14) | < 8.71~dfsg-4 | 8.71~dfsg-4 |
References
- Debian Security Tracker CVE-2010-1869 vendor-advisory
- SUSE-SR:2010:014 vendor-advisory
- 39753 third-party-advisory
- 40580 third-party-advisory
- www.checkpoint.com
- MDVSA-2010:102 vendor-advisory
- 20100512 Multiple memory corruption vulnerabilities in Ghostscript mailing-list
- 40103 vdb-entry
- 1024003 vdb-entry
- USN-961-1 vendor-advisory
- ADV-2010-1138 vdb-entry
- ADV-2010-1195 vdb-entry