CVE-2008-0411
NoneCVSS
—
EPSS
14.5%
Published
Feb 28, 2008
CISA due date
—
The record
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | ghostscript | 0 | 8.61.dfsg.1-1.1 |
| Debian:11 | ghostscript | 0 | 8.61.dfsg.1-1.1 |
| Debian:12 | ghostscript | 0 | 8.61.dfsg.1-1.1 |
| Debian:13 | ghostscript | 0 | 8.61.dfsg.1-1.1 |
| Debian:14 | ghostscript | 0 | 8.61.dfsg.1-1.1 |
| Debian:3.1 | gs-esp | 0 | 7.07.1-9sarge1 |
| Debian:3.1 | gs-gpl | 0 | 8.01-6 |
| Debian:4.0 | gs-esp | 0 | 8.15.3.dfsg.1-1etch1 |
| Debian:4.0 | gs-gpl | 0 | 8.54.dfsg.1-5etch1 |
| Red Hat:enterprise_linux:3::as | ghostscript | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::as | ghostscript-debuginfo | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::as | ghostscript-devel | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::as | hpijs | 0 | 0:1.3-32.1.13 |
| Red Hat:enterprise_linux:3::desktop | ghostscript | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::desktop | ghostscript-debuginfo | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::desktop | ghostscript-devel | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::desktop | hpijs | 0 | 0:1.3-32.1.13 |
| Red Hat:enterprise_linux:3::es | ghostscript | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::es | ghostscript-debuginfo | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::es | ghostscript-devel | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::es | hpijs | 0 | 0:1.3-32.1.13 |
| Red Hat:enterprise_linux:3::ws | ghostscript | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::ws | ghostscript-debuginfo | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::ws | ghostscript-devel | 0 | 0:7.05-32.1.13 |
| Red Hat:enterprise_linux:3::ws | hpijs | 0 | 0:1.3-32.1.13 |
| Red Hat:enterprise_linux:4::as | ghostscript | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::as | ghostscript-debuginfo | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::as | ghostscript-devel | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::as | ghostscript-gtk | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | ghostscript | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | ghostscript-debuginfo | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | ghostscript-devel | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | ghostscript-gtk | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::es | ghostscript | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::es | ghostscript-debuginfo | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::es | ghostscript-devel | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::es | ghostscript-gtk | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | ghostscript | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | ghostscript-debuginfo | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | ghostscript-devel | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | ghostscript-gtk | 0 | 0:7.07-33.2.el4_6.1 |
| Red Hat:enterprise_linux:5::client | ghostscript | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client | ghostscript-debuginfo | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client | ghostscript-devel | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client | ghostscript-gtk | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | ghostscript | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | ghostscript-debuginfo | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | ghostscript-devel | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | ghostscript-gtk | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::server | ghostscript | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::server | ghostscript-debuginfo | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::server | ghostscript-devel | 0 | 0:8.15.2-9.1.el5_1.1 |
| Red Hat:enterprise_linux:5::server | ghostscript-gtk | 0 | 0:8.15.2-9.1.el5_1.1 |
Related vulnerabilities
- CVE-2023-38559 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in… Also affects ghostscript
- CVE-2021-45944 Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample… Also affects ghostscript
- CVE-2016-7976 The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute… Also affects ghostscript
- CVE-2013-5653 The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER"… Also affects ghostscript
- CVE-2009-3560 The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the… Also affects ghostscript
- CVE-2009-3720 The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in… Also affects ghostscript
- CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46955 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript