[Full-disclosure] rPSA-2009-0050-1 ghostscript
rPath Update Announcements
announce-noreply at rpath.com
Thu Mar 19 19:52:09 GMT 2009
rPath Security Advisory: 2009-0050-1
rPath Linux 2
Exposure Level Classification:
Indirect Deterministic Vulnerability
ghostscript=conary.rpath.com at rpl:devel/8.61-2.1-1
rPath Issue Tracking System:
Previous versions of Ghostscript are potentially vulnerable to
context-dependent attacks via integer overflows and missing upper
bounds checks in Ghostscript's ICC library causing application
crashes or even arbitrary code execution.
Copyright 2009 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at http://www.rpath.com/permanent/mit-license.html
Full-Disclosure is hosted and sponsored by Secunia.