CVE-2009-3743

Ghostscript prior to 8.71 is affected by an off-by-one error in the Ins_MINDEX function of the TrueType bytecode interpreter, allowing a remote attacker to execute arbitrary code or cause a denial of service via a malformed TrueType font (heap memory corruption). The issue (CVE-2009-3743) is cite...