peter bassill · operator
$ cve CVE-2008-0411 JSON

CVE-2008-0411 EXPLOIT

6.8
MEDIUM · CVSS 2.0 · EPSS 14.5% (pctl 97)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Scoring

CVSS6.8 (MEDIUM, v2.0)
VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS14.52% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2008-02-28
Last modified2026-06-16

Affected (14)

VendorProduct
debiandebian linux
ghostscriptghostscript
mandrakesoftmandrake linux
mandrakesoftmandrake linux corporate server
mandrakesoftmandrakesoft corporate server
redhatdesktop
redhatenterprise linux
redhatenterprise linux desktop
redhatenterprise linux desktop workstation
rpathrpath linux
susenovell linux pos
suseopen suse
susesuse linux
susesuse open enterprise server

Public exploits

SourceTitleDate
exploit-dbGhostscript 8.0.1/8.15 - 'zseticcspace()' Remote Buffer Overflow2008-02-27

References

→ the Explorer  ·  watch your stack  ·  NVD