SUSE-SR:2010:014Vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html CVE-2010-1869
Ghostscript - '.PostScript' File Stack Overflow
Record summary
CVE-2010-1869 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBGhostscript - '.PostScript' File Stack OverflowExploitDB exploitby Rodrigo Rubira BrancoNot analyzed1 file
References
1239753Third-party advisory
http://secunia.com/advisories/39753 40580Third-party advisory
http://secunia.com/advisories/40580 checkpoint.com
http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html MDVSA-2010:102Vendor advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:102 20100512 Multiple memory corruption vulnerabilities in Ghostscriptmailing list
http://www.securityfocus.com/archive/1/511243/100/0/threaded 40103vdb entry
http://www.securityfocus.com/bid/40103 1024003vdb entry
http://www.securitytracker.com/id?1024003 USN-961-1Vendor advisory
http://www.ubuntu.com/usn/USN-961-1 ADV-2010-1138vdb entry
http://www.vupen.com/english/advisories/2010/1138 ADV-2010-1195vdb entry
http://www.vupen.com/english/advisories/2010/1195 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-1869