Advisories:rPSA-2009-0050

From rPath Wiki

rPath Security Advisory 2009-0050-1

Published: 2009-03-19

Products

• rPath Linux 2

Rating

Minor

Exposure Level Classification

Indirect Deterministic Vulnerability

Updated Versions

• ghostscript=conary.rpath.com@rpl:devel/8.61-2.1-1

rPath Issue Tracking System

• RPL-2991

References

• CVE-2009-0583
• CVE-2009-0584

Description

Previous versions of Ghostscript are potentially vulnerable to

context-dependent attacks via integer overflows and missing upper

bounds checks in Ghostscript's ICC library causing application

crashes or even arbitrary code execution.

Copyright 2009 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html