CVE-2007-6725: Buffer Overflow
A denial of service flaw was found in Ghostscript's CCITTFax decoding filter. An attacker could create a specially-crafted PDF file which could cause Ghostscript to crash, or, potentially execute arbitrary code, when opened by the victim.
Other sources
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function.
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2007-6725?
CVE-2007-6725 is classified as a denial of service vulnerability that could also lead to potential arbitrary code execution.
How do I fix CVE-2007-6725?
To mitigate CVE-2007-6725, users should update Ghostscript to a version that is not affected, specifically versions after 8.61.
What software versions are affected by CVE-2007-6725?
CVE-2007-6725 affects Ghostscript versions 8.60 and 8.61 among others listed in the advisory.
What could happen if I open a malicious PDF with CVE-2007-6725?
Opening a malicious PDF file may cause Ghostscript to crash or potentially allow an attacker to execute arbitrary code.
Who is vulnerable to CVE-2007-6725?
Any user or system running the affected versions of Ghostscript is at risk of exploitation via specially-crafted PDF files.