Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-6679
HistoryApr 08, 2009 - 12:00 a.m.

CVE-2008-6679

2009-04-0800:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.123 Low

EPSS

Percentile

95.4%

Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and
possibly other versions, allows remote attackers to cause a denial of
service (ps2pdf crash) and possibly execute arbitrary code via a crafted
Postscript file.

Bugs

Notes

Author Note
mdeslaur PoC available
OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchghostscript< 8.61.dfsg.1-1ubuntu3.2UNKNOWN
ubuntu8.10noarchghostscript< 8.63.dfsg.1-0ubuntu6.4UNKNOWN
ubuntu6.06noarchgs-esp< 8.15.2.dfsg.0ubuntu1-0ubuntu1.2UNKNOWN
ubuntu6.06noarchgs-gpl< 8.15-4ubuntu3.3UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.123 Low

EPSS

Percentile

95.4%