Lucene search
RootSSV:4943HistoryMar 23, 2009 - 12:00 a.m.
Ghostscript多个输入验证和整数溢出漏洞
2009-03-2300:00:00
Root
www.seebug.org
15
0.01 Low
EPSS
Percentile
81.8%
BUGTRAQ ID: 34184
CVE(CAN) ID: CVE-2009-0583,CVE-2009-0584
Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。
Ghostscript的国际色彩联盟格式库（icclib）中存在多个可导致堆溢出的整数溢出，以及多个不充分输入验证错误。攻击者可以使用特制的ICC配置文件创建嵌入了图形的恶意PostScript或PDF文件，如果受害用户打开了该文件就会导致Ghostscript崩溃或执行任意代码。
Ghostscript Ghostscript 8.x
Ghostscript Ghostscript 7.x
厂商补丁：
RedHat
RedHat已经为此发布了一个安全公告（RHSA-2009:0345-01）以及相应补丁:
RHSA-2009:0345-01：Moderate: ghostscript security update
链接：<a href=“https://www.redhat.com/support/errata/RHSA-2009-0345.html” target=“_blank”>https://www.redhat.com/support/errata/RHSA-2009-0345.html</a>
Related
openvas
openvas
Fedora Core 10 FEDORA-2009-2885 (ghostscript)
2009-03-31 00:00:00
SLES10: Security update for Ghostscript
2009-10-13 00:00:00
nessus
nessus
openSUSE Security Update : ghostscript-devel (ghostscript-devel-592)
2009-07-21 00:00:00
CentOS 3 / 4 : ghostscript (CESA-2009:0345)
2009-03-20 00:00:00
F5 Networks BIG-IP : icclib vulnerabilities (SOL9990)
2014-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: ghostscript-8.63-5.fc10
2009-03-21 01:30:09
[SECURITY] Fedora 10 Update: argyllcms-1.0.3-3.fc10
2009-03-25 16:08:47
[SECURITY] Fedora 9 Update: ghostscript-8.63-2.fc9
2009-03-21 01:28:59
securityvulns
securityvulns
ghostscript integer overflow
2009-03-20 00:00:00
rPSA-2009-0050-1 ghostscript
2009-03-20 00:00:00
oraclelinux
oraclelinux
ghostscript security update
2009-03-19 00:00:00
centos
centos
ghostscript, hpijs security update
2009-03-19 17:02:51
osv
osv
ghostscript gs-gpl - arbitrary code execution
2009-03-20 00:00:00
f5
f5
K9990 : icclib vulnerabilities CVE-2009-0583 and CVE-2009-0584
2013-03-24 00:00:00
SOL9990 - icclib vulnerabilities CVE-2009-0583 and CVE-2009-0584
2009-04-21 00:00:00
debian
debian
ubuntu
ubuntu
Ghostscript vulnerabilities
2009-03-23 00:00:00
Ghostscript vulnerabilities
2009-04-15 00:00:00
gentoo
gentoo
Ghostscript: User-assisted execution of arbitrary code
2009-03-23 00:00:00
redhat
redhat
(RHSA-2009:0345) Moderate: ghostscript security update
2009-03-19 00:00:00
slackware
slackware
ghostscript
2009-06-29 23:40:52
prion
prion
Input validation
2009-03-23 20:00:00
Integer overflow
2009-03-23 20:00:00
Integer overflow
2009-04-14 16:26:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:30:12
Arbitrary Code Execution
2020-04-10 00:30:11
cve
cve
ubuntucve
ubuntucve
debiancve
debiancve