[Secure-testing-team] Bug#562643: CVE-2009-4270: Stack-based buffer overflow in the errprintf function
iuculano at debian.org
Sat Dec 26 18:14:18 UTC 2009
-----BEGIN PGP SIGNED MESSAGE-----
the following CVE (Common Vulnerabilities & Exposures) id was
published for ghostscript.
| Stack-based buffer overflow in the errprintf function in base/gsmisc.c
| in ghostscript 8.64 through 8.70 allows remote attackers to cause a
| denial of service (crash) and possibly execute arbitrary code via a
| crafted PDF file, as originally reported for debug logging code in
| gdevcups.c in the CUPS output driver.
If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.
For further information see:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Secure-testing-team