Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers…
Priority MEDIUM 50CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.
Why it matters now
EPSS 0.06629 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 31
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:artifex:afpl_ghostscript:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:6.01:*:*:*:*:*:*:* | 6.01 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:6.50:*:*:*:*:*:*:* | 6.50 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:7.00:*:*:*:*:*:*:* | 7.00 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:7.03:*:*:*:*:*:*:* | 7.03 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:7.04:*:*:*:*:*:*:* | 7.04 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.00:*:*:*:*:*:*:* | 8.00 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.11:*:*:*:*:*:*:* | 8.11 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.12:*:*:*:*:*:*:* | 8.12 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.13:*:*:*:*:*:*:* | 8.13 | Vulnerable | Artifex |
- cpe:2.3:a:artifex:afpl_ghostscript:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:6.01:*:*:*:*:*:*:* Versions 6.01 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:6.50:*:*:*:*:*:*:* Versions 6.50 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:7.00:*:*:*:*:*:*:* Versions 7.00 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:7.04:*:*:*:*:*:*:* Versions 7.04 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.00:*:*:*:*:*:*:* Versions 8.00 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.11:*:*:*:*:*:*:* Versions 8.11 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.12:*:*:*:*:*:*:* Versions 8.12 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.13:*:*:*:*:*:*:* Versions 8.13 Vulnerable ·Artifex
Show 21 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:artifex:afpl_ghostscript:8.14:*:*:*:*:*:*:* | 8.14 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.50:*:*:*:*:*:*:* | 8.50 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.51:*:*:*:*:*:*:* | 8.51 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.52:*:*:*:*:*:*:* | 8.52 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.53:*:*:*:*:*:*:* | 8.53 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:afpl_ghostscript:8.54:*:*:*:*:*:*:* | 8.54 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:ghostscript_fonts:8.11:*:*:*:*:*:*:* | 8.11 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:* | up to 8.64 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.01:*:*:*:*:*:*:* | 8.01 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.15:*:*:*:*:*:*:* | 8.15 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.50:*:*:*:*:*:*:* | 8.50 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.51:*:*:*:*:*:*:* | 8.51 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.54:*:*:*:*:*:*:* | 8.54 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.56:*:*:*:*:*:*:* | 8.56 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.57:*:*:*:*:*:*:* | 8.57 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.60:*:*:*:*:*:*:* | 8.60 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.61:*:*:*:*:*:*:* | 8.61 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.62:*:*:*:*:*:*:* | 8.62 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.63:*:*:*:*:*:*:* | 8.63 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.70:*:*:*:*:*:*:* | 8.70 | Vulnerable | Artifex |
| cpe:2.3:a:artifex:gpl_ghostscript:8.71:*:*:*:*:*:*:* | 8.71 | Vulnerable | Artifex |
- cpe:2.3:a:artifex:afpl_ghostscript:8.14:*:*:*:*:*:*:* Versions 8.14 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.50:*:*:*:*:*:*:* Versions 8.50 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.52:*:*:*:*:*:*:* Versions 8.52 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.53:*:*:*:*:*:*:* Versions 8.53 Vulnerable ·Artifex
- cpe:2.3:a:artifex:afpl_ghostscript:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Artifex
- cpe:2.3:a:artifex:ghostscript_fonts:8.11:*:*:*:*:*:*:* Versions 8.11 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:* Versions up to 8.64 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.01:*:*:*:*:*:*:* Versions 8.01 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.15:*:*:*:*:*:*:* Versions 8.15 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.50:*:*:*:*:*:*:* Versions 8.50 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.51:*:*:*:*:*:*:* Versions 8.51 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.54:*:*:*:*:*:*:* Versions 8.54 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.56:*:*:*:*:*:*:* Versions 8.56 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.57:*:*:*:*:*:*:* Versions 8.57 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.60:*:*:*:*:*:*:* Versions 8.60 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.61:*:*:*:*:*:*:* Versions 8.61 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.62:*:*:*:*:*:*:* Versions 8.62 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.63:*:*:*:*:*:*:* Versions 8.63 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.70:*:*:*:*:*:*:* Versions 8.70 Vulnerable ·Artifex
- cpe:2.3:a:artifex:gpl_ghostscript:8.71:*:*:*:*:*:*:* Versions 8.71 Vulnerable ·Artifex
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat Enterprise Linux 4
- Red Hat Enterprise Linux 5
Timeline
- 2026-10-02 Threatist record created from CVE-2009-4897
- 2026-10-03 Alias added: GHSA-53pw-2446-9fc8
References
More Artifex Afpl Ghostscript vulnerabilities
- TI-2009-03564 Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in… CVSS 2.0HIGH 9.3
- TI-2017-04059 Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in… CVSS 3.0HIGH 7.8
- TI-2015-02857 Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript… CVSS 2.0MEDIUM 6.8
- TI-2010-01970 Ghostscript 8.71 and earlier reads initialization files from the current working… CVSS 2.0HIGH 7.2
- TI-2013-04820 The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER"… CVSS 3.0MEDIUM 5.5
- TI-2010-03842 The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2009-4897 · CVE Program
- CVE-2009-4897 · NVD
- FIRST EPSS
- GHSA-53pw-2446-9fc8 · GitHub Advisory Database · CC BY 4.0
- CVE-2009-4897 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences