Lucene search
Ubuntu.comUB:CVE-2010-1869HistoryMay 12, 2010 - 12:00 a.m.
CVE-2010-1869
2010-05-1200:00:00
ubuntu.com
ubuntu.com
13
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.005
Percentile
76.7%
Stack-based buffer overflow in the parser function in GhostScript 8.70 and
8.64 allows context-dependent attackers to execute arbitrary code via a
crafted PostScript file.
Bugs
- <https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-1869>
- <http://bugs.ghostscript.com/show_bug.cgi?id=690902>
Notes
| Author | Note |
|---|---|
| mdeslaur | reproducer doesn’t appear to work on dapper’s gs-esp stack protector makes this a DoS on karmic |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.04 | noarch | ghostscript | < 8.61.dfsg.1-1ubuntu3.3 | UNKNOWN |
| ubuntu | 9.04 | noarch | ghostscript | < 8.64.dfsg.1-0ubuntu8.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | ghostscript | < 8.70.dfsg.1-0ubuntu3.1 | UNKNOWN |
Related
cve
cve
CVE-2010-1869
2010-05-12 11:46:40
openvas
openvas
Mandriva Update for ghostscript MDVSA-2010:102 (ghostscript)
2010-05-28 00:00:00
Mandriva Update for ghostscript MDVSA-2010:102 (ghostscript)
2010-05-28 00:00:00
Mandriva Update for mandriva-release MDVA-2010:102 (mandriva-release)
2010-03-22 00:00:00
checkpoint_advisories
checkpoint_advisories
GhostScript PostScript Parser Stack Overflow (CVE-2010-1869)
2010-05-11 00:00:00
prion
prion
Stack overflow
2010-05-12 11:46:00
nvd
nvd
CVE-2010-1869
2010-05-12 11:46:40
cvelist
cvelist
CVE-2010-1869
2010-05-12 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:102)
2010-05-20 00:00:00
Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : ghostscript vulnerabilities (USN-961-1)
2010-07-14 00:00:00
openSUSE Security Update : ghostscript-devel (openSUSE-SU-2010:0425-1)
2010-07-23 00:00:00
securityvulns
securityvulns
Ghostscript buffer overflow
2010-05-18 00:00:00
Multiple memory corruption vulnerabilities in Ghostscript
2010-05-12 00:00:00
GhostScript Vulnerability Clarification - CVE-2010-1869
2010-05-18 00:00:00
debiancve
debiancve
CVE-2010-1869
2010-05-12 11:46:40
ubuntu
ubuntu
Ghostscript vulnerabilities
2010-07-13 00:00:00
osv
osv
ghostscript - several vulnerabilities
2010-08-01 00:00:00
debian
debian
[SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities
2010-08-01 01:24:55
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.005
Percentile
76.7%
Related for UB:CVE-2010-1869