Published: 16/04/2009 Updated: 11/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote malicious users to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ghostscript ghostscript
ghostscript ghostscript 8.63
ghostscript ghostscript 8.15.2
ghostscript ghostscript 8.15
ghostscript ghostscript 8.56
ghostscript ghostscript 8.54
ghostscript ghostscript 8.60
ghostscript ghostscript 8.57
ghostscript ghostscript 5.50
ghostscript ghostscript 0
ghostscript ghostscript 8.62
ghostscript ghostscript 8.61
ghostscript ghostscript 8.0.1
ghostscript ghostscript 7.07

Synopsis Moderate: ghostscript security update Type/Severity Security Advisory: Moderate Topic Updated ghostscript packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team ...

It was discovered that Ghostscript contained a buffer underflow in its CCITTFax decoding filter If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program (CVE-2007-6725) ...

Debian Bug report logs - #524803 ghostscript: multiple vulnerabilities Package: ghostscript; Maintainer for ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Source for ghostscript is src:ghostscript (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom> Date: Mon, ...

Debian Bug report logs - #522416 ghostscript: CVE-2009-058{3,4} multiple integer overflows resulting in arbitrary code execution Package: ghostscript; Maintainer for ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Source for ghostscript is src:ghostscript (PTS, buildd, popcon) Reported by: Nico Golde ...

Several security issues have been discovered in Ghostscript, a GPL PostScript/PDF interpreter, which might lead to the execution of arbitrary code if a user processes a malformed PDF or Postscript file For the stable distribution (lenny), these problems have been fixed in version 862dfsg1-32lenny4 For the unstable distribution (sid), these pr ...

CWE-119 http://secunia.com/advisories/34292 http://secunia.com/secunia_research/2009-21/http://www.vupen.com/english/advisories/2009/0983 https://bugzilla.redhat.com/attachment.cgi?id=337747 http://www.securityfocus.com/bid/34445 http://www.securitytracker.com/id?1022029 http://osvdb.org/53492 http://www.redhat.com/support/errata/RHSA-2009-0421.html http://secunia.com/advisories/34732 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00460.html http://secunia.com/advisories/34729 http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00461.html http://wiki.rpath.com/Advisories:rPSA-2009-0060 http://secunia.com/advisories/34667 http://www.mandriva.com/security/advisories?name=MDVSA-2009:095 http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html http://secunia.com/advisories/35416 http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1 http://www.vupen.com/english/advisories/2009/1708 http://secunia.com/advisories/35559 http://secunia.com/advisories/35569 http://security.gentoo.org/glsa/glsa-201412-17.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10533 https://usn.ubuntu.com/757-1/http://www.securityfocus.com/archive/1/502757/100/0/threaded http://www.securityfocus.com/archive/1/502586/100/0/threaded https://access.redhat.com/errata/RHSA-2009:0421 https://usn.ubuntu.com/757-1/https://nvd.nist.gov

CVE-2009-0196

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect