Lucene search

FlexeraCVE-2009-0196

HistoryApr 16, 2009 - 3:12 p.m.

CVE-2009-0196

2009-04-1615:12:57

CWE-119

flexera

web.nvd.nist.gov

cve-2009-0196

nvd

buffer overflow

jbig2

ghostscript

pdf

security

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.139

Percentile

95.7%

JSON

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.

Affected configurations

Nvd

Node

ghostscriptghostscriptRange≤8.64

ghostscriptghostscriptMatch0

ghostscriptghostscriptMatch5.50

ghostscriptghostscriptMatch7.07

ghostscriptghostscriptMatch8.0.1

ghostscriptghostscriptMatch8.15

ghostscriptghostscriptMatch8.15.2

ghostscriptghostscriptMatch8.54

ghostscriptghostscriptMatch8.56

ghostscriptghostscriptMatch8.57

ghostscriptghostscriptMatch8.60

ghostscriptghostscriptMatch8.61

ghostscriptghostscriptMatch8.62

ghostscriptghostscriptMatch8.63

VendorProductVersionCPE
ghostscriptghostscript8.15cpe:/a:ghostscript:ghostscript:8.15:::
ghostscriptghostscriptcpe:/a:ghostscript:ghostscript::::
ghostscriptghostscript0cpe:/a:ghostscript:ghostscript:0:::
ghostscriptghostscript8.54cpe:/a:ghostscript:ghostscript:8.54:::
ghostscriptghostscript8.57cpe:/a:ghostscript:ghostscript:8.57:::
ghostscriptghostscript8.0.1cpe:/a:ghostscript:ghostscript:8.0.1:::
ghostscriptghostscript8.62cpe:/a:ghostscript:ghostscript:8.62:::
ghostscriptghostscript8.15.2cpe:/a:ghostscript:ghostscript:8.15.2:::
ghostscriptghostscript8.63cpe:/a:ghostscript:ghostscript:8.63:::
ghostscriptghostscript8.61cpe:/a:ghostscript:ghostscript:8.61:::

Vendor	Product	Version	CPE
ghostscript	ghostscript	8.15	cpe:/a:ghostscript:ghostscript:8.15:::
ghostscript	ghostscript		cpe:/a:ghostscript:ghostscript::::
ghostscript	ghostscript	0	cpe:/a:ghostscript:ghostscript:0:::
ghostscript	ghostscript	8.54	cpe:/a:ghostscript:ghostscript:8.54:::
ghostscript	ghostscript	8.57	cpe:/a:ghostscript:ghostscript:8.57:::
ghostscript	ghostscript	8.0.1	cpe:/a:ghostscript:ghostscript:8.0.1:::
ghostscript	ghostscript	8.62	cpe:/a:ghostscript:ghostscript:8.62:::
ghostscript	ghostscript	8.15.2	cpe:/a:ghostscript:ghostscript:8.15.2:::
ghostscript	ghostscript	8.63	cpe:/a:ghostscript:ghostscript:8.63:::
ghostscript	ghostscript	8.61	cpe:/a:ghostscript:ghostscript:8.61:::