CVE-2009-3743
Fixed in a distro release EPSS 7%
Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.
Products: artifex afpl_ghostscript, artifex ghostscript_fonts, artifex gpl_ghostscript
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ghostscript | 8.71~dfsg-1 |
| Debian 13 | ghostscript | 8.71~dfsg-1 |
| Debian 14 | ghostscript | 8.71~dfsg-1 |
| Red Hat Enterprise Linux 5 | ghostscript | 0:8.70-6.el5_7.6 |
| Red Hat Enterprise Linux 5 | ghostscript-debuginfo | 0:8.70-6.el5_7.6 |
| Red Hat Enterprise Linux 5 | ghostscript-devel | 0:8.70-6.el5_7.6 |
| Red Hat Enterprise Linux 5 | ghostscript-gtk | 0:8.70-6.el5_7.6 |
| Red Hat Enterprise Linux 6 | ghostscript | 0:8.70-11.el6_2.6 |
| Red Hat Enterprise Linux 6 | ghostscript-debuginfo | 0:8.70-11.el6_2.6 |
| Red Hat Enterprise Linux 6 | ghostscript-devel | 0:8.70-11.el6_2.6 |
| Red Hat Enterprise Linux 6 | ghostscript-doc | 0:8.70-11.el6_2.6 |
| Red Hat Enterprise Linux 6 | ghostscript-gtk | 0:8.70-11.el6_2.6 |