CVE-2009-3743: Buffer Overflow

First published: Thu Aug 26 2010(Updated: )

Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.

Credit: cret@cert.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/weakness
• agent/references
• agent/severity
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• agent/author
• agent/description
• agent/type
• agent/event
• agent/tags
• collector/mitre-cve
• source/MITRE
• vendor/artifex
• canonical/artifex gpl ghostscript
• version/artifex gpl ghostscript/8.01
• canonical/artifex afpl ghostscript
• version/artifex afpl ghostscript/7.00
• version/artifex afpl ghostscript/8.54
• version/artifex gpl ghostscript/8.54
• version/artifex gpl ghostscript/8.15
• version/artifex gpl ghostscript/8.70
• version/artifex afpl ghostscript/7.04
• version/artifex afpl ghostscript/7.03
• version/artifex afpl ghostscript/8.13
• version/artifex afpl ghostscript/8.50
• version/artifex gpl ghostscript/8.56
• version/artifex gpl ghostscript/8.62
• version/artifex afpl ghostscript/8.52
• version/artifex gpl ghostscript/8.57
• version/artifex afpl ghostscript/8.14
• version/artifex gpl ghostscript/8.51
• version/artifex afpl ghostscript/8.00
• version/artifex gpl ghostscript/8.61
• version/artifex afpl ghostscript/8.53
• canonical/artifex ghostscript fonts
• version/artifex ghostscript fonts/6.0
• version/artifex afpl ghostscript/6.0
• version/artifex gpl ghostscript/8.50
• version/artifex gpl ghostscript/8.64
• version/artifex afpl ghostscript/6.01
• version/artifex gpl ghostscript/8.60
• version/artifex afpl ghostscript/8.12
• version/artifex afpl ghostscript/8.11
• version/artifex gpl ghostscript/8.63
• version/artifex afpl ghostscript/8.51
• version/artifex ghostscript fonts/8.11
• version/artifex afpl ghostscript/6.50