PT-2009-2876

CVE-2009-0196

Published

2009-04-14

Updated

2018-10-11

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 8.64

Description A heap-based buffer overflow issue exists in the JBIG2 decoding library, specifically in the big2 decode symbol dict function, allowing remote attackers to execute arbitrary code via a crafted PDF file containing a JBIG2 symbol dictionary segment with a large run length value.

Recommendations For Ghostscript versions prior to 8.64, update to a version that includes a fix for this issue to prevent exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Alin Rad Pop

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers