CVE-2009-0196

Impact:
Moderate
Public Date:
2009-04-08
Bugzilla:
493379: CVE-2009-0196 ghostscript: Missing boundary check in Ghostscript's jbig2dec library

The MITRE CVE dictionary describes this issue as:

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.

Find out more about CVE-2009-0196 from the MITRE CVE dictionary dictionary and NIST NVD.

CVSS v2 metrics

Base Score 6.8
Base Metrics AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 (ghostscript) RHSA-2009:0421 2009-04-14

Acknowledgements

Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly reporting this flaw.
Last Modified

CVE description copyright © 2017, The MITRE Corporation