CVE-2008-0411

Description

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

References

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html

http://www.vupen.com/english/advisories/2008/0693/references

http://www.ubuntu.com/usn/usn-599-1

http://www.securitytracker.com/id?1019511

http://www.securityfocus.com/bid/28017

http://www.redhat.com/support/errata/RHSA-2008-0155.html

http://www.mandriva.com/security/advisories?name=MDVSA-2008:055

http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml

http://www.debian.org/security/2008/dsa-1510

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633

http://secunia.com/advisories/29768

http://secunia.com/advisories/29314

http://secunia.com/advisories/29196

http://secunia.com/advisories/29169

http://secunia.com/advisories/29154

http://secunia.com/advisories/29147

http://secunia.com/advisories/29135

http://secunia.com/advisories/29112

http://secunia.com/advisories/29103

http://secunia.com/advisories/29101

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3