How to Buy
This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200903-37
(Ghostscript: User-assisted execution of arbitrary code)
Jan Lieskovsky from the Red Hat Security Response Team discovered the
following vulnerabilities in Ghostscript's ICC Library:
Multiple integer overflows (CVE-2009-0583).
insufficient bounds checks on certain variable sizes
A remote attacker could entice a user to open a specially crafted
PostScript file containing images and a malicious ICC profile, possibly
resulting in the execution of arbitrary code with the privileges of the
user running the application.
There is no known workaround at this time.
See also :
All GPL Ghostscript users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=app-text/ghostscript-gpl-8.64-r2'
All GNU Ghostscript users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=app-text/ghostscript-gnu-8.62.0'
We recommend that users unmerge ESP Ghostscript and use GPL or GNU
# emerge --unmerge 'app-text/ghostscript-esp'
For installation instructions, see above.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 8.1
Public Exploit Available : false
Family: Gentoo Local Security Checks
Nessus Plugin ID: 36003 (gentoo_GLSA-200903-37.nasl)
Bugtraq ID: 34184
CVE ID: CVE-2009-0583CVE-2009-0584
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.