CVE-2009-3743
Severity:
Pending analysis
Type:
CWE-189
Numeric Errors
Publication date:
26/08/2010
Last modified:
10/10/2018
Description
Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:artifex:afpl_ghostscript:6.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:6.01:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:6.50:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:7.00:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:7.03:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:7.04:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.00:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.11:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.12:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.13:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.14:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.50:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.51:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.52:*:*:*:*:*:*:* | ||
cpe:2.3:a:artifex:afpl_ghostscript:8.53:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page