vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-0411

N/A
Published: February 28, 2008 at 09:00 PM UTC
Updated: June 16, 2026 at 10:49 PM UTC
1 product affected across 1 vendorGhostscript· also runs on 13 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 15%

Description

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ghostscript· Ghostscript
95%
v ≤ 8.6108.0.18.15
debian-debian-linux (environment) · mandrakesoft-mandrake-linux (environment) · mandrakesoft-mandrake-linux-corporate-server (environment) · mandrakesoft-mandrakesoft-corporate-server (environment) · redhat-desktop (environment) · redhat-enterprise-linux (environment) · redhat-enterprise-linux-desktop (environment) · redhat-enterprise-linux-desktop-workstation (environment) · rpath-rpath-linux (environment) · suse-novell-linux-pos (environment) · suse-open-suse (environment) · suse-suse-linux (environment) · suse-suse-open-enterprise-server (environment)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

References (27)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html
x_refsource_MISCExploit
Source: [email protected]
http://scary.beasts.org/security/CESA-2008-001.html
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29101
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29103
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29112
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29135
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29147
Third Party Advisoryx_refsource_SECUNIAURL Repurposed
Source: [email protected]
http://secunia.com/advisories/29154

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card