CVE-2009-4897: Buffer Overflow
First published: Mon Jul 12 2010(Updated: )
A memory corruption vulnerability caused by long names was discovered [1] in Ghostscript 8.64 and earlier. A specially crafted PDF file could result in the execution of arbitrary code if opened or printed (i.e. via CUPS). This was corrected in upstream Ghostscript 8.70 [2], version 8.64 and previous are affected by this flaw (all the way back to Ghostscript 7.05). References: [1] <a href="http://bugs.ghostscript.com/show_bug.cgi?id=690523">http://bugs.ghostscript.com/show_bug.cgi?id=690523</a> [2] <a href="http://svn.ghostscript.com/viewvc?view=rev&revision=9797">http://svn.ghostscript.com/viewvc?view=rev&revision=9797</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Artifex Gpl Ghostscript | =8.01 | |
| Artifex Afpl Ghostscript | =7.00 | |
| Artifex Afpl Ghostscript | =8.54 | |
| Artifex Gpl Ghostscript | =8.54 | |
| Artifex Gpl Ghostscript | =8.15 | |
| Artifex Afpl Ghostscript | =7.04 | |
| Artifex Afpl Ghostscript | =7.03 | |
| Artifex Afpl Ghostscript | =8.13 | |
| Artifex Afpl Ghostscript | =8.50 | |
| Artifex Gpl Ghostscript | =8.56 | |
| Artifex Gpl Ghostscript | =8.62 | |
| Artifex Afpl Ghostscript | =8.52 | |
| Artifex Gpl Ghostscript | =8.57 | |
| Artifex Gpl Ghostscript | <=8.64 | |
| Artifex Afpl Ghostscript | =8.14 | |
| Artifex Gpl Ghostscript | =8.51 | |
| Artifex Afpl Ghostscript | =8.00 | |
| Artifex Gpl Ghostscript | =8.61 | |
| Artifex Afpl Ghostscript | =8.53 | |
| Artifex Afpl Ghostscript | =6.0 | |
| Artifex Gpl Ghostscript | =8.50 | |
| Artifex Afpl Ghostscript | =6.01 | |
| Artifex Gpl Ghostscript | =8.71 | |
| Artifex Gpl Ghostscript | =8.70 | |
| Artifex Gpl Ghostscript | =8.60 | |
| Artifex Afpl Ghostscript | =8.12 | |
| Artifex Afpl Ghostscript | =8.11 | |
| Artifex Gpl Ghostscript | =8.63 | |
| Artifex Afpl Ghostscript | =8.51 | |
| Artifex Ghostscript Fonts | =8.11 | |
| Artifex Afpl Ghostscript | =6.50 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/41593
- http://bugs.ghostscript.com/show_bug.cgi?id=690523
- https://bugzilla.redhat.com/show_bug.cgi?id=613792
- http://www.ubuntu.com/usn/USN-961-1
- http://secunia.com/advisories/40580
- http://www.osvdb.org/66277
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:134
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:135
- http://security.gentoo.org/glsa/glsa-201412-17.xml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60380
- http://svn.ghostscript.com/viewvc?view=rev&revision=9797
- https://access.redhat.com/security/cve/CVE-2010-1869
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=582300
- http://thread.gmane.org/gmane.comp.security.oss.general/3184
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=613792#c0
- http://svn.ghostscript.com/viewvc?view=rev&revision=8805
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2009-4897
- agent/tags
- agent/trending
- vendor/artifex
- canonical/artifex gpl ghostscript
- version/artifex gpl ghostscript/8.01
- canonical/artifex afpl ghostscript
- version/artifex afpl ghostscript/7.00
- version/artifex afpl ghostscript/8.54
- version/artifex gpl ghostscript/8.54
- version/artifex gpl ghostscript/8.15
- version/artifex afpl ghostscript/7.04
- version/artifex afpl ghostscript/7.03
- version/artifex afpl ghostscript/8.13
- version/artifex afpl ghostscript/8.50
- version/artifex gpl ghostscript/8.56
- version/artifex gpl ghostscript/8.62
- version/artifex afpl ghostscript/8.52
- version/artifex gpl ghostscript/8.57
- version/artifex gpl ghostscript/8.64
- version/artifex afpl ghostscript/8.14
- version/artifex gpl ghostscript/8.51
- version/artifex afpl ghostscript/8.00
- version/artifex gpl ghostscript/8.61
- version/artifex afpl ghostscript/8.53
- version/artifex afpl ghostscript/6.0
- version/artifex gpl ghostscript/8.50
- version/artifex afpl ghostscript/6.01
- version/artifex gpl ghostscript/8.71
- version/artifex gpl ghostscript/8.70
- version/artifex gpl ghostscript/8.60
- version/artifex afpl ghostscript/8.12
- version/artifex afpl ghostscript/8.11
- version/artifex gpl ghostscript/8.63
- version/artifex afpl ghostscript/8.51
- canonical/artifex ghostscript fonts
- version/artifex ghostscript fonts/8.11
- version/artifex afpl ghostscript/6.50