CVE-2009-4270

Published: Dec 21, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver.

Affected (2)

Products: Ghostscript: Ghostscript

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ghostscript Ghostscript	Version 8.64
Ghostscript Ghostscript	Version 8.70

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (28)

http://bugs.ghostscript.com/show_bug.cgi?id=690829

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

Source: secalert@redhat.com

http://osvdb.org/61140

Source: secalert@redhat.com

http://secunia.com/advisories/37851

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/40580

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201412-17.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:134

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:135

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2009/12/18/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2009/12/18/2

Source: secalert@redhat.com

http://www.securityfocus.com/bid/37410

Source: secalert@redhat.com

Exploit

http://www.ubuntu.com/usn/USN-961-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/3597

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=540760

Source: secalert@redhat.com

http://bugs.ghostscript.com/show_bug.cgi?id=690829

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/61140

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37851

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/40580

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201412-17.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:134

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:135

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/12/18/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/12/18/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/37410

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.ubuntu.com/usn/USN-961-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3597

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=540760

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.