CVE-2010-1628

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
artifexgpl_ghostscript
8.64
artifexgpl_ghostscript
8.70
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ghostscript
bullseye
9.53.3~dfsg-7+deb11u7
fixed
bullseye (security)
9.53.3~dfsg-7+deb11u8
fixed
bookworm
10.0.0~dfsg-11+deb12u4
fixed
bookworm (security)
10.0.0~dfsg-11+deb12u5
fixed
sid
10.04.0~dfsg-1
fixed
trixie
10.04.0~dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ghostscript
lucid
Fixed 8.71.dfsg.1-0ubuntu5.2
released
karmic
Fixed 8.70.dfsg.1-0ubuntu3.1
released
jaunty
Fixed 8.64.dfsg.1-0ubuntu8.1
released
intrepid
ignored
hardy
Fixed 8.61.dfsg.1-1ubuntu3.3
released
dapper
dne
gs-afpl
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored
gs-esp
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
not-affected
gs-gpl
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored
Common Weakness Enumeration
References
http://bugs.ghostscript.com/show_bug.cgi?id=691295
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://seclists.org/fulldisclosure/2010/May/134
http://secunia.com/advisories/39753
http://secunia.com/advisories/40580
http://security.gentoo.org/glsa/glsa-201412-17.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2010:134
http://www.openwall.com/lists/oss-security/2010/05/12/1
http://www.openwall.com/lists/oss-security/2010/05/18/7
http://www.securityfocus.com/archive/1/511243/100/0/threaded
http://www.securityfocus.com/bid/40107
http://www.ubuntu.com/usn/USN-961-1
http://www.vupen.com/english/advisories/2010/1138
https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009
http://bugs.ghostscript.com/show_bug.cgi?id=691295
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://seclists.org/fulldisclosure/2010/May/134
http://secunia.com/advisories/39753
http://secunia.com/advisories/40580
http://security.gentoo.org/glsa/glsa-201412-17.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2010:134
http://www.openwall.com/lists/oss-security/2010/05/12/1
http://www.openwall.com/lists/oss-security/2010/05/18/7
http://www.securityfocus.com/archive/1/511243/100/0/threaded
http://www.securityfocus.com/bid/40107
http://www.ubuntu.com/usn/USN-961-1
http://www.vupen.com/english/advisories/2010/1138
https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009