S-208: Ghostscript Vulnerability

Tags

ghostscript, scrip, script, security

Special Forums Cybersecurity Security Advisories (RSS) S-208: Ghostscript Vulnerability

02-27-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-208: Ghostscript Vulnerability

Ghostscript is prone to an unspecified buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The risk is MEDIUM. Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. Programming

Compiling ghostscript v 9.21

I ran configure, and then make, using the SCO 6.0.0 cc compiler. -bash-3.2# make UX:make: ERROR: bad character | (octal 174), line 277 (bu40)UX:make: ERROR: Mess age not found!! ...

2. UNIX for Dummies Questions & Answers

Ghostscript on SCO 5.0.7

I am attempting to update to ghostscript version 8.54 on my SCO 5.0.7 box. When I run ./configure, I get the following error configure: error: no acceptable C compiler found in $PATH Could someone please help me?

3. UNIX for Dummies Questions & Answers

Ghostscript

I am trying to use Ghostscript oin AIX to print pdf's and it seems I have downloaded it and all dependencys fine - install went fine, when I type any gs commnad except gs -h it just hangs..Here is what it says before the hang: GNU Ghostscript 5.50 (2000-2-13) Copyright (C) 1998 Aladdin...

4. UNIX for Dummies Questions & Answers

Perl and ghostscript

Hi all I am using HPUX11.0 i want to install perl 5.6.0 and ghostscript 5.03.. can anyone help me to get it download from any free ftp or http link... i searched perl.com and ghostscript.com but in vain.... the procuct are to be installed with the above mentioned version... please...

LEARN ABOUT SUSE

eps2eps

PS2PS(1)							 Ghostscript Tools							  PS2PS(1)

NAME

       ps2ps, eps2eps - Ghostscript PostScript "distiller"

SYNOPSIS

       ps2ps [ options ] input.ps output.ps
       eps2eps [ options ] input.eps output.eps

DESCRIPTION

       ps2ps uses gs(1) to convert PostScript(tm) file "input.ps" to simpler, normalized and (usually) faster PostScript in "output.ps".  Normally
       the output is allowed to use PostScript Level 2 or Level 3 constructs, but the -dLanguageLevel=1 option restricts the output to Level 1.

       eps2eps performs the equivalent optimization for Encapsulated PostScript (EPS) files.

       Both accept any general Ghostscript command line options, and respectively options specific to the pswrite and epswrite devices.

FILES

       Run "gs -h" to find the location of Ghostscript documentation on your system, from which you can get more details.

BUGS

       The pswrite device used by both ps2ps and eps2eps produces much lower level output than is desirable. Use with caution.

SEE ALSO

       ps2pdf(1), ps2ascii(1), ps2epsi(1)

VERSION

       This document was last revised for Ghostscript version 8.70.

AUTHOR

       Artifex Software, Inc. are the primary maintainers of Ghostscript.

8.70								   31 July 2009 							  PS2PS(1)

Security Advisories (RSS)