CVE-2008-0411
Ghostscript < 8.61 - Remote Code Execution via Long Range Array in .seticcspace Operator
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0411. PoCs published by Will Drewry.
AI-analyzed exploit summary This exploit targets a buffer overflow in Ghostscript's .seticcspace function by encoding shellcode as floats to overflow a statically allocated array. It generates a malicious PostScript file that triggers arbitrary code execution when processed by vulnerable Ghostscript versions.
Description
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Exploits (1)
This exploit targets a buffer overflow in Ghostscript's .seticcspace function by encoding shellcode as floats to overflow a statically allocated array. It generates a malicious PostScript file that triggers arbitrary code execution when processed by vulnerable Ghostscript versions.