ghostscript -- zseticcspace() function buffer overflow vulnerability

Chris Evans from the Google Security Team reports:

Severity: parsing of evil PostScript file will result in
arbitrary code execution.
A stack-based buffer overflow in the zseticcspace() function
in zicc.c allows remote arbitrary code execution via a
malicious PostScript file (.ps) that contains a long Range
array.