CVE-2010-1628
published 2010-05-19CVE-2010-1628: Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited…
critical9.3CVSS 3.1
AVNACMAuNCCICAC
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | >= 0 < 8.71~dfsg2-4 | 8.71~dfsg2-4 |
| artifex | ghostscript | >= 0 < 8.71~dfsg2-4 | 8.71~dfsg2-4 |
| artifex | ghostscript | >= 0 < 8.71~dfsg2-4 | 8.71~dfsg2-4 |
| artifex | ghostscript | >= 0 < 8.71~dfsg2-4 | 8.71~dfsg2-4 |
| artifex | gpl_ghostscript | — | — |
| artifex | gpl_ghostscript | — | — |
| debian | ghostscript | < ghostscript 8.71~dfsg2-4 (bookworm) | ghostscript 8.71~dfsg2-4 (bookworm) |
CVSS provenance
nvd9.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv9.3CRITICAL