Red Hat Security Advisory

RHSA-2009:0421

ghostscript security update

Released 2009-04-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) ghostscript-8.15.2-9.4.el5_3.7, ghostscript-8.15.2-9.4.el5_3.7.i386, ghostscript-8.15.2-9.4.el5_3.7.ia64 +9
Red Hat Enterprise Linux Desktop (v. 5 client) ghostscript-8.15.2-9.4.el5_3.7, ghostscript-8.15.2-9.4.el5_3.7.i386, ghostscript-gtk-8.15.2-9.4.el5_3.7 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ghostscript-8.15.2-9.4.el5_3.7, ghostscript-devel-8.15.2-9.4.el5_3.7, ghostscript-devel-8.15.2-9.4.el5_3.7.i386

Fixes 4 records

TI-2009-00183 CVE-2009-0196 · GHSA-76p8-fv4q-j2wv

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c)…

MEDIUM 50

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arb…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07433 Published 2009-04-16 Fixed CWE-119

TI-2009-00754 CVE-2009-0792 · GHSA-c674-58j3-3v3w

Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format…

MEDIUM 47

Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow conte…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03991 Published 2009-04-14 Fixed CWE-189

TI-2007-06419 CVE-2007-6725 · GHSA-pv3g-wrcf-hmrv

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions…

MEDIUM 41

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0484 Published 2009-04-08 Fixed CWE-119

TI-2008-06368 CVE-2008-6679 · GHSA-6p24-mjw7-mgwh

Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other…

LOW 30

Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postsc…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04495 Published 2009-04-08 Fixed CWE-119