CVE-2009-4897

Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
VendorProductVersion
artifexafpl_ghostscript
6.0
artifexafpl_ghostscript
6.01
artifexafpl_ghostscript
6.50
artifexafpl_ghostscript
7.00
artifexafpl_ghostscript
7.03
artifexafpl_ghostscript
7.04
artifexafpl_ghostscript
8.00
artifexafpl_ghostscript
8.11
artifexafpl_ghostscript
8.12
artifexafpl_ghostscript
8.13
artifexafpl_ghostscript
8.14
artifexafpl_ghostscript
8.50
artifexafpl_ghostscript
8.51
artifexafpl_ghostscript
8.52
artifexafpl_ghostscript
8.53
artifexafpl_ghostscript
8.54
artifexghostscript_fonts
8.11
artifexgpl_ghostscript
𝑥
≤ 8.64
artifexgpl_ghostscript
8.01
artifexgpl_ghostscript
8.15
artifexgpl_ghostscript
8.50
artifexgpl_ghostscript
8.51
artifexgpl_ghostscript
8.54
artifexgpl_ghostscript
8.56
artifexgpl_ghostscript
8.57
artifexgpl_ghostscript
8.60
artifexgpl_ghostscript
8.61
artifexgpl_ghostscript
8.62
artifexgpl_ghostscript
8.63
artifexgpl_ghostscript
8.70
artifexgpl_ghostscript
8.71
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ghostscript
bullseye
9.53.3~dfsg-7+deb11u7
fixed
bullseye (security)
9.53.3~dfsg-7+deb11u8
fixed
bookworm
10.0.0~dfsg-11+deb12u4
fixed
bookworm (security)
10.0.0~dfsg-11+deb12u5
fixed
sid
10.04.0~dfsg-1
fixed
trixie
10.04.0~dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ghostscript
lucid
not-affected
karmic
not-affected
jaunty
Fixed 8.64.dfsg.1-0ubuntu8.1
released
intrepid
ignored
hardy
Fixed 8.61.dfsg.1-1ubuntu3.3
released
dapper
dne
gs-afpl
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored
gs-esp
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
not-affected
gs-gpl
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored