Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-05-19 15:30
Updated : 2018-10-10 12:57
NVD link : CVE-2010-1628
Mitre link : CVE-2010-1628
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
artifex
- gpl_ghostscript