CVE-2009-4270
published 2009-12-21CVE-2009-4270: Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service…
critical9.3CVSS 3.1
AVNACMAuNCCICAC
Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | >= 0 < 8.70~dfsg-2.1 | 8.70~dfsg-2.1 |
| artifex | ghostscript | >= 0 < 8.70~dfsg-2.1 | 8.70~dfsg-2.1 |
| artifex | ghostscript | >= 0 < 8.70~dfsg-2.1 | 8.70~dfsg-2.1 |
| artifex | ghostscript | >= 0 < 8.70~dfsg-2.1 | 8.70~dfsg-2.1 |
| debian | ghostscript | < ghostscript 8.70~dfsg-2.1 (bookworm) | ghostscript 8.70~dfsg-2.1 (bookworm) |
| ghostscript | ghostscript | — | — |
| ghostscript | ghostscript | — | — |
CVSS provenance
nvd9.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL