Ghostscript errprintf()函数PDF文件处理栈溢出漏洞

BUGTRAQ ID: 37410 CVE ID: CVE-2009-4270 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript的base/gsmisc.c文件中的errprintf函数在通过CUPS打印特制的PDF文件时存在栈溢出漏洞，如果特制的PDF能够导致打印失败，则gs cups驱动的某些调试输出就可以在gs调试处理中触发这个溢出，导致执行任意代码。 Ghostscript Ghostscript 8.70 Ghostscript Ghostscript 8.64 厂商补丁： Ghostscrip...

DEBIAN-CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

Stack overflow

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270

CVE-2009-4270 affects GPL Ghostscript 8.64–8.70, with a stack-based buffer overflow in errprintf (base/gsmisc.c) and related logging in gdevcups.c, allowing a remote attacker to crash the process and possibly execute arbitrary code via a crafted PDF. Public advisories cite this alongside 8.71 in ...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

CVE-2009-4270: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS...

Mandriva Security Advisory MDVSA-2009:311 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:311. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:311 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory MDVSA-2009:311. OpenVAS Vulnerability Test $Id: mdksa2009311.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:311 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2009:311)

Multiple security vulnerabilities has been identified and fixed in ghostscript : A buffer underflow in Ghostscript's CCITTFax decoding filter allows remote attackers to cause denial of service and possibly to execute arbitrary by using a crafted PDF file CVE-2007-6725. Buffer overflow in...

SLES10: Security update for GhostScript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-omni ghostscript-x11 libgimpprint libgimpprint-devel More...

Solaris Update for Ghostscript 115835-05

Check for the Version of Ghostscript OpenVAS Vulnerability Test Solaris Update for Ghostscript 115835-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SLES10: Security update for Ghostscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-omni ghostscript-x11 libgimpprint libgimpprint-devel More...

Solaris Update for Ghostscript 115836-05

Check for the Version of Ghostscript OpenVAS Vulnerability Test Solaris Update for Ghostscript 115836-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SLES10: Security update for GhostScript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-omni ghostscript-x11 libgimpprint libgimpprint-devel More...

Solaris Update for Ghostscript 115835-05

Check for the Version of Ghostscript OpenVAS Vulnerability Test Solaris Update for Ghostscript 115835-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SLES10: Security update for Ghostscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ghostscript-fonts-other ghostscript-fonts-rus ghostscript-fonts-std ghostscript-library ghostscript-omni ghostscript-x11 libgimpprint libgimpprint-devel More...