CVE-2008-0411

Exploit

EPSS 19.48%
Published 28.02.2008 21:44:00
Last modified 09.04.2025 00:30:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Affected products Warnungen 0 Metrics 2 CWE 1 References 30

Data is provided by the National Vulnerability Database (NVD)

Ghostscript ≫ Ghostscript Version <= 8.61

   Debian ≫ Debian Linux Version3.1
   Debian ≫ Debian Linux Version3.1 Editionalpha
   Debian ≫ Debian Linux Version3.1 Editionamd64
   Debian ≫ Debian Linux Version3.1 Editionarm
   Debian ≫ Debian Linux Version3.1 Editionhppa
   Debian ≫ Debian Linux Version3.1 Editionia-32
   Debian ≫ Debian Linux Version3.1 Editionia-64
   Debian ≫ Debian Linux Version3.1 Editionm68k
   Debian ≫ Debian Linux Version3.1 Editionmips
   Debian ≫ Debian Linux Version3.1 Editionmipsel
   Debian ≫ Debian Linux Version3.1 Editionppc
   Debian ≫ Debian Linux Version3.1 Editions-390
   Debian ≫ Debian Linux Version3.1 Editionsparc
   Debian ≫ Debian Linux Version4.0
   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions-390
   Debian ≫ Debian Linux Version4.0 Editionsparc
   Mandrakesoft ≫ Mandrake Linux Version2007
   Mandrakesoft ≫ Mandrake Linux Version2007.0_x86_64
   Mandrakesoft ≫ Mandrake Linux Version2007.1
   Mandrakesoft ≫ Mandrake Linux Version2007.1 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2008.0
   Mandrakesoft ≫ Mandrake Linux Version2008.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0
   Mandrakesoft ≫ Mandrakesoft Corporate Server Version3.0_x86_64
   Mandrakesoft ≫ Mandrakesoft Corporate Server Version4.0_x86_64
   Redhat ≫ Desktop Version3.0
   Redhat ≫ Desktop Version4.0
   Redhat ≫ Enterprise Linux Version5 Editionserver
   Redhat ≫ Enterprise Linux Versionas_3
   Redhat ≫ Enterprise Linux Versionas_4
   Redhat ≫ Enterprise Linux Versiones_3
   Redhat ≫ Enterprise Linux Versiones_4
   Redhat ≫ Enterprise Linux Versionws_3
   Redhat ≫ Enterprise Linux Versionws_4
   Redhat ≫ Enterprise Linux Desktop Version5 Editionclient
   Redhat ≫ Enterprise Linux Desktop Workstation Version5 Editionclient
   Rpath ≫ Rpath Linux Version1
   Suse ≫ Novell Linux Pos Version9
   Suse ≫ Open Suse Version10.2
   Suse ≫ Open Suse Version10.3
   Suse ≫ Suse Linux Version9.0 Editionenterprise_server
   Suse ≫ Suse Linux Version10 Updatesp1 Editionenterprise_desktop
   Suse ≫ Suse Linux Version10 Updatesp1 Editionenterprise_server
   Suse ≫ Suse Linux Version10.1 Editionppc
   Suse ≫ Suse Linux Version10.1 Editionx86
   Suse ≫ Suse Linux Version10.1 Editionx86_64
   Suse ≫ Suse Open Enterprise Server Version0

Ghostscript ≫ Ghostscript Version0

Ghostscript ≫ Ghostscript Version8.0.1

Ghostscript ≫ Ghostscript Version8.15

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	19.48%	0.952

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html

Third Party Advisory

Mailing List

http://scary.beasts.org/security/CESA-2008-001.html

Exploit

http://secunia.com/advisories/29101

URL Repurposed

http://secunia.com/advisories/29103

URL Repurposed

http://secunia.com/advisories/29112

URL Repurposed

http://secunia.com/advisories/29135