← Database

CVE-2008-0411

MEDIUM CVSS: 6.8 Published: 2008-02-28 Modified: 2026-06-16

Description

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Affected Platforms

Mandrakesoft Mandrake Linux Corporate ServerSuse Open SuseMandrakesoft Mandrake LinuxRedhat Enterprise LinuxRedhat Enterprise Linux Desktop WorkstationRedhat DesktopRedhat Enterprise Linux DesktopMandrakesoft Mandrakesoft Corporate ServerDebian Debian LinuxRpath Rpath Linux

Weakness Type

CWE-119

References