CVE-2008-0411
MEDIUM 6.8EPSS 14.5%
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 14.52% chance of exploitation in the next 30 days, 97th percentile
- Published
- 2008-02-28
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:055
- http://www.securityfocus.com/bid/28017
- http://www.securitytracker.com/id?1019511
- http://www.ubuntu.com/usn/usn-599-1
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html
- http://www.debian.org/security/2008/dsa-1510
- http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml
- http://www.redhat.com/support/errata/RHSA-2008-0155.html