Уязвимость CVE-2008-0411: Информация

Описание

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Важность: MEDIUM (6,8)

Опубликовано: 29 февраля 2008 г.
Изменено: 16 февраля 2024 г.
Идентификатор типа ошибки: CWE-119

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
http://scary.beasts.org/security/CESA-2008-001.html
  • Exploit
DSA-1510
  • Patch
RHSA-2008:0155
  • URL Repurposed
28017
  • Third Party Advisory
  • VDB Entry
https://issues.rpath.com/browse/RPL-2217
  • Broken Link
MDVSA-2008:055
  • Third Party Advisory
SUSE-SA:2008:010
  • Mailing List
  • Third Party Advisory
29101
  • URL Repurposed
29147
  • URL Repurposed
29169
  • URL Repurposed
http://wiki.rpath.com/Advisories:rPSA-2008-0082
  • Broken Link
FEDORA-2008-1998
  • Release Notes
  • Third Party Advisory
SSA:2008-062-01
  • Mailing List
1019511
  • Third Party Advisory
  • VDB Entry
29103
  • URL Repurposed
29112
  • URL Repurposed
29135
  • URL Repurposed
29196
  • URL Repurposed
29154
  • URL Repurposed
GLSA-200803-14
  • Patch
29314
  • URL Repurposed
USN-599-1
  • Third Party Advisory
29768
  • URL Repurposed
ADV-2008-0693
  • Not Applicable
oval:org.mitre.oval:def:9557
  • Broken Link
20080228 Ghostscript buffer overflow
  • Broken Link
  • VDB Entry
20080228 rPSA-2008-0082-1 espgs
  • Broken Link
  • VDB Entry
    1. Конфигурация 1

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2007.0_x86_64:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1:*:x86_64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:x86_64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrakesoft_corporate_server:3.0_x86_64:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:mandrakesoft:mandrakesoft_corporate_server:4.0_x86_64:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:desktop:3.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:desktop:4.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:5:*:server:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:as_3:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:as_4:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:es_3:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:es_4:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:ws_3:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux:ws_4:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux_desktop:5:*:client:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:redhat:enterprise_linux_desktop_workstation:5:*:client:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:rpath:rpath_linux:1:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:novell_linux_pos:9:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:open_suse:10.2:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:open_suse:10.3:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_server:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:10:sp1:enterprise_desktop:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:10.1:*:x86_64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:10.1:*:x86:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_linux:10.1:*:ppc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:suse:suse_open_enterprise_server:0:*:*:*:*:*:*:*

      cpe:2.3:a:ghostscript:ghostscript:*:*:*:*:*:*:*:*

      Конфигурация 2

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:powerpc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:s-390:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:sparc:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

      Running on/with:
      cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:*

      cpe:2.3:a:ghostscript:ghostscript:0:*:*:*:*:*:*:*

      cpe:2.3:a:ghostscript:ghostscript:8.0.1:*:*:*:*:*:*:*

      cpe:2.3:a:ghostscript:ghostscript:8.15:*:*:*:*:*:*:*