PT-2009-2876

CVE-2009-0196

Publicado

2009-04-14

Atualizado

2018-10-11

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 8.64

Description A heap-based buffer overflow issue exists in the JBIG2 decoding library, specifically in the big2 decode symbol dict function, allowing remote attackers to execute arbitrary code via a crafted PDF file containing a JBIG2 symbol dictionary segment with a large run length value.

Recommendations For Ghostscript versions prior to 8.64, update to a version that includes a fix for this issue to prevent exploitation.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Alin Rad Pop

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados