cve/2008/CVE-2008-0411.md

CVE-2008-0411

Description

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

POC

Reference

• http://scary.beasts.org/security/CESA-2008-001.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557

Github

No PoCs found on GitHub currently.