CVE-2009-3743
26.08.2010, 21:00
Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| artifex | afpl_ghostscript | 6.0 |
| artifex | afpl_ghostscript | 6.01 |
| artifex | afpl_ghostscript | 6.50 |
| artifex | afpl_ghostscript | 7.00 |
| artifex | afpl_ghostscript | 7.03 |
| artifex | afpl_ghostscript | 7.04 |
| artifex | afpl_ghostscript | 8.00 |
| artifex | afpl_ghostscript | 8.11 |
| artifex | afpl_ghostscript | 8.12 |
| artifex | afpl_ghostscript | 8.13 |
| artifex | afpl_ghostscript | 8.14 |
| artifex | afpl_ghostscript | 8.50 |
| artifex | afpl_ghostscript | 8.51 |
| artifex | afpl_ghostscript | 8.52 |
| artifex | afpl_ghostscript | 8.53 |
| artifex | afpl_ghostscript | 8.54 |
| artifex | ghostscript_fonts | 6.0 |
| artifex | ghostscript_fonts | 8.11 |
| artifex | gpl_ghostscript | 𝑥 ≤ 8.70 |
| artifex | gpl_ghostscript | 8.01 |
| artifex | gpl_ghostscript | 8.15 |
| artifex | gpl_ghostscript | 8.50 |
| artifex | gpl_ghostscript | 8.51 |
| artifex | gpl_ghostscript | 8.54 |
| artifex | gpl_ghostscript | 8.56 |
| artifex | gpl_ghostscript | 8.57 |
| artifex | gpl_ghostscript | 8.60 |
| artifex | gpl_ghostscript | 8.61 |
| artifex | gpl_ghostscript | 8.62 |
| artifex | gpl_ghostscript | 8.63 |
| artifex | gpl_ghostscript | 8.64 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ghostscript |
| ||||||||||||||||
| gs-afpl |
| ||||||||||||||||
| gs-esp |
| ||||||||||||||||
| gs-gpl |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References