PT-2009-1048 · Artifex+2 · Ghostscript+2
Published
2009-04-08
·
Updated
2018-10-15
·
CVE-2007-6725
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Ghostscript versions 8.60 through 8.61
hpijs-1.3
Description
The issue allows remote attackers to cause problems, including a denial of service, and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the
cf decode 2d function. Multiple vulnerabilities in the hpijs package may lead to breaches of confidentiality, integrity, and availability of protected information, and can be exploited remotely.Recommendations
For Ghostscript versions 8.60 through 8.61, update to a version that fixes the buffer underflow issue in the
cf decode 2d function.
For hpijs-1.3, apply the necessary security patches to address the multiple vulnerabilities.
At the moment, there is no information about a newer version that contains a fix for this vulnerability in hpijs.Exploit
Fix
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ghostscript
Red Hat
Hpijs