NVD

Id
389  
Name
CVE-2008-0411  
Description
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-02-28  
Modified Date
2011-03-07  
Seq
2008-0411  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2510 389 CVE-2008-0411 SUSE-SA:2008:010  View
2511 389 CVE-2008-0411 oval:org.mitre.oval:def:9557  View
2512 389 CVE-2008-0411 http://scary.beasts.org/security/CESA-2008-001.html  View
2513 389 CVE-2008-0411 SSA:2008-062-01  View
2514 389 CVE-2008-0411 http://wiki.rpath.com/Advisories:rPSA-2008-0082  View
2515 389 CVE-2008-0411 DSA-1510  View
2516 389 CVE-2008-0411 GLSA-200803-14  View
2517 389 CVE-2008-0411 MDVSA-2008:055  View
2518 389 CVE-2008-0411 RHSA-2008:0155  View
2519 389 CVE-2008-0411 20080228 rPSA-2008-0082-1 espgs  View
2520 389 CVE-2008-0411 20080228 Ghostscript buffer overflow  View
2521 389 CVE-2008-0411 28017  View
2522 389 CVE-2008-0411 1019511  View
2523 389 CVE-2008-0411 USN-599-1  View
2524 389 CVE-2008-0411 ADV-2008-0693  View
2525 389 CVE-2008-0411 https://issues.rpath.com/browse/RPL-2217  View
2526 389 CVE-2008-0411 FEDORA-2008-1998  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45839 JVNDB-2008-001149 Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性 Ghostscript の zicc.c には、zseticcspace() 関数において、.seticcspace オペレーターの配列処理に不備があるために、postscript (.ps) ファイルによってスタックベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2008-0411 30524 CVE-2008-0411 389 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001149.html 2008-02-27 2010-02-17 View