Published: 12/05/2010 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent malicious users to execute arbitrary code via a crafted PostScript file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artifex gpl ghostscript 8.70
artifex gpl ghostscript 8.64

David Srbecky discovered that Ghostscript incorrectly handled debug logging If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program This issue only affected Ubuntu 904 and Ubuntu 910 The default compiler op ...

Several security issues have been discovered in Ghostscript, a GPL PostScript/PDF interpreter, which might lead to the execution of arbitrary code if a user processes a malformed PDF or Postscript file For the stable distribution (lenny), these problems have been fixed in version 862dfsg1-32lenny4 For the unstable distribution (sid), these pr ...

########################################################################## # Check Point Software Technologies - Vulnerability Discovery Team (VDT) # # Rodrigo Rubira Branco - <rbranco *noSPAM* checkpointcom> # # # # GhostScript Stack Overflow # # # ################################################################# ...

CWE-119 http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:102 http://www.vupen.com/english/advisories/2010/1138 http://secunia.com/advisories/39753 http://www.vupen.com/english/advisories/2010/1195 http://www.securitytracker.com/id?1024003 http://www.securityfocus.com/bid/40103 http://www.ubuntu.com/usn/USN-961-1 http://secunia.com/advisories/40580 http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html http://www.securityfocus.com/archive/1/511243/100/0/threaded https://usn.ubuntu.com/961-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/14406/

CVE-2010-1869

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect