9.3

CVE-2009-3743

Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Artifex ≫ Afpl Ghostscript Version 6.0
Artifex ≫ Afpl Ghostscript Version 6.01
Artifex ≫ Afpl Ghostscript Version 6.50
Artifex ≫ Afpl Ghostscript Version 7.00
Artifex ≫ Afpl Ghostscript Version 7.03
Artifex ≫ Afpl Ghostscript Version 7.04
Artifex ≫ Afpl Ghostscript Version 8.00
Artifex ≫ Afpl Ghostscript Version 8.11
Artifex ≫ Afpl Ghostscript Version 8.12
Artifex ≫ Afpl Ghostscript Version 8.13
Artifex ≫ Afpl Ghostscript Version 8.14
Artifex ≫ Afpl Ghostscript Version 8.50
Artifex ≫ Afpl Ghostscript Version 8.51
Artifex ≫ Afpl Ghostscript Version 8.52
Artifex ≫ Afpl Ghostscript Version 8.53
Artifex ≫ Afpl Ghostscript Version 8.54
Artifex ≫ Ghostscript Fonts Version 6.0
Artifex ≫ Ghostscript Fonts Version 8.11
Artifex ≫ Gpl Ghostscript Version <= 8.70
Artifex ≫ Gpl Ghostscript Version 8.01
Artifex ≫ Gpl Ghostscript Version 8.15
Artifex ≫ Gpl Ghostscript Version 8.50
Artifex ≫ Gpl Ghostscript Version 8.51
Artifex ≫ Gpl Ghostscript Version 8.54
Artifex ≫ Gpl Ghostscript Version 8.56
Artifex ≫ Gpl Ghostscript Version 8.57
Artifex ≫ Gpl Ghostscript Version 8.60
Artifex ≫ Gpl Ghostscript Version 8.61
Artifex ≫ Gpl Ghostscript Version 8.62
Artifex ≫ Gpl Ghostscript Version 8.63
Artifex ≫ Gpl Ghostscript Version 8.64
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.76% 0.931
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://security.gentoo.org/glsa/glsa-201412-17.xml
https://rhn.redhat.com/errata/RHSA-2012-0095.html
http://www.kb.cert.org/vuls/id/644319
US Government Resource
http://www.kb.cert.org/vuls/id/JALR-87YGN8
US Government Resource
http://www.securityfocus.com/archive/1/514892/100/0/threaded
http://www.securitytracker.com/id?1024785