CVE-2008-0411: Buffer Overflow
Published Feb 28, 2008
·Updated
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Affected Software
150 affected components
All of the following
Any of the following
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Mandrakesoft Mandrake Linux=2007
Mandrakesoft Mandrake Linux=2007.0_x86_64
Mandrakesoft Mandrake Linux=2007.1
Mandrakesoft Mandrake Linux=2007.1
Mandrakesoft Mandrake Linux=2008.0
Mandrakesoft Mandrake Linux=2008.0
Mandrakesoft Mandrake Linux Corporate Server=3.0
Mandrakesoft Mandrake Linux Corporate Server=4.0
Mandrakesoft Mandrakesoft Corporate Server=3.0_x86_64
Mandrakesoft Mandrakesoft Corporate Server=4.0_x86_64
redhat Desktop=3.0
redhat Desktop=4.0
redhat Enterprise Linux=5
redhat Enterprise Linux=as_3
redhat Enterprise Linux=as_4
redhat Enterprise Linux=es_3
redhat Enterprise Linux=es_4
redhat Enterprise Linux=ws_3
redhat Enterprise Linux=ws_4
redhat Enterprise Linux Desktop=5
redhat Enterprise Linux Desktop Workstation=5
rPath rPath Linux=1
SUSE Novell Linux Pos=9
SUSE Open Suse=10.2
SUSE Open Suse=10.3
SUSE SuSE Linux=9.0
SUSE SuSE Linux=10-sp1
SUSE SuSE Linux=10-sp1
SUSE SuSE Linux=10.1
SUSE SuSE Linux=10.1
SUSE SuSE Linux=10.1
SUSE Suse Open Enterprise Server=0
Ghostscript Ghostscript<=8.61
All of the following
Any of the following
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Any of the following
Ghostscript Ghostscript=0
Ghostscript Ghostscript=8.0.1
Ghostscript Ghostscript=8.15
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=3.1
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Debian Debian Linux=4.0
Mandrakesoft Mandrake Linux=2007
Mandrakesoft Mandrake Linux=2007.0_x86_64
Mandrakesoft Mandrake Linux=2007.1
Mandrakesoft Mandrake Linux=2007.1
Mandrakesoft Mandrake Linux=2008.0
Mandrakesoft Mandrake Linux=2008.0
Mandrakesoft Mandrake Linux Corporate Server=3.0
Mandrakesoft Mandrake Linux Corporate Server=4.0
Mandrakesoft Mandrakesoft Corporate Server=3.0_x86_64
Mandrakesoft Mandrakesoft Corporate Server=4.0_x86_64
redhat Desktop=3.0
redhat Desktop=4.0
redhat Enterprise Linux=5
redhat Enterprise Linux=as_3
redhat Enterprise Linux=as_4
redhat Enterprise Linux=es_3
redhat Enterprise Linux=es_4
redhat Enterprise Linux=ws_3
redhat Enterprise Linux=ws_4
redhat Enterprise Linux Desktop=5
redhat Enterprise Linux Desktop Workstation=5
rPath rPath Linux=1
SUSE Novell Linux Pos=9
SUSE Open Suse=10.2
SUSE Open Suse=10.3
SUSE SuSE Linux=9.0
SUSE SuSE Linux=10-sp1
SUSE SuSE Linux=10-sp1
SUSE SuSE Linux=10.1
SUSE SuSE Linux=10.1
SUSE SuSE Linux=10.1
SUSE Suse Open Enterprise Server=0
Ghostscript Ghostscript<=8.61
Ghostscript Ghostscript=0
Ghostscript Ghostscript=8.0.1
Ghostscript Ghostscript=8.15
Remediation
Patch Available
Patch Available
Event History
Feb 28, 2008
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
09:44 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-0411?
CVE-2008-0411 has been classified as a critical vulnerability, allowing for remote code execution through specially crafted PostScript files.
2
How do I fix CVE-2008-0411?
To fix CVE-2008-0411, update Ghostscript to a version later than 8.61, which addresses this buffer overflow issue.
3
Which software is affected by CVE-2008-0411?
CVE-2008-0411 affects Ghostscript versions 8.61 and earlier, potentially impacting various distributions like Debian and Mandriva.
4
Can CVE-2008-0411 be exploited remotely?
Yes, CVE-2008-0411 can be exploited remotely by leveraging a malicious PostScript file.
5
What type of vulnerability is CVE-2008-0411?
CVE-2008-0411 is a stack-based buffer overflow vulnerability.