CVE-2009-4897: Buffer Overflow
A memory corruption vulnerability caused by long names was discovered [1] in Ghostscript 8.64 and earlier. A specially crafted PDF file could result in the execution of arbitrary code if opened or printed (i.e. via CUPS).
This was corrected in upstream Ghostscript 8.70 [2], version 8.64 and previous are affected by this flaw (all the way back to Ghostscript 7.05).
References:
[1] http://bugs.ghostscript.com/showbug.cgi?id=690523 [2] http://svn.ghostscript.com/viewvc?view=rev&revision=9797
Other sources
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4897?
CVE-2009-4897 has been classified as a critical memory corruption vulnerability.
How do I fix CVE-2009-4897?
To fix CVE-2009-4897, upgrade Ghostscript to version 8.70 or later.
What are the affected versions for CVE-2009-4897?
CVE-2009-4897 affects Ghostscript versions 8.64 and earlier.
What type of attack does CVE-2009-4897 enable?
CVE-2009-4897 allows for the execution of arbitrary code when a specially crafted PDF is opened or printed.
Which software is vulnerable to CVE-2009-4897?
Ghostscript, including various versions such as 8.01, 7.00, and 8.54, is vulnerable to CVE-2009-4897.