NVD

Id
47533  
Name
CVE-2009-0196  
Description
Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-16  
Modified Date
2015-01-06  
Seq
2009-0196  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
238096 47533 CVE-2009-0196 SUSE-SR:2009:009  View
238097 47533 CVE-2009-0196 SUSE-SR:2009:011  View
238098 47533 CVE-2009-0196 oval:org.mitre.oval:def:10533  View
238099 47533 CVE-2009-0196 GLSA-201412-17  View
238100 47533 CVE-2009-0196 262288  View
238101 47533 CVE-2009-0196 http://wiki.rpath.com/Advisories:rPSA-2009-0060  View
238102 47533 CVE-2009-0196 MDVSA-2009:095  View
238103 47533 CVE-2009-0196 RHSA-2009:0421  View
238104 47533 CVE-2009-0196 20090409 Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow  View
238105 47533 CVE-2009-0196 20090417 rPSA-2009-0060-1 ghostscript  View
238106 47533 CVE-2009-0196 34445  View
238107 47533 CVE-2009-0196 1022029  View
238108 47533 CVE-2009-0196 USN-757-1  View
238109 47533 CVE-2009-0196 ADV-2009-0983  View
238110 47533 CVE-2009-0196 ADV-2009-1708  View
238111 47533 CVE-2009-0196 https://bugzilla.redhat.com/attachment.cgi?id=337747  View
238112 47533 CVE-2009-0196 FEDORA-2009-3709  View
238113 47533 CVE-2009-0196 FEDORA-2009-3710  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40249 JVNDB-2009-001255 Ghostscript の big2_decode_symbol_dict 関数におけるバッファオーバーフローの脆弱性 Ghostscript の JBIG2 decoding ライブラリ (jbig2dec) にある big2_decode_symbol_dict 関数には、PDF ファイルの処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0196 37627 CVE-2009-0196 47533 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001255.html 2009-04-14 2009-08-04 View