CVE-2007-6725
CVE-2007-6725
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
EPSS 4.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ghostscript Debian:12
- Affected ranges
- ECOSYSTEM: < 8.63.dfsg.1-1
Update to 8.63.dfsg.1-1
ghostscript Debian:13
- Affected ranges
- ECOSYSTEM: < 8.63.dfsg.1-1
Update to 8.63.dfsg.1-1
ghostscript Debian:14
- Affected ranges
- ECOSYSTEM: < 8.63.dfsg.1-1
Update to 8.63.dfsg.1-1
Original sources
- http://www.redhat.com/support/errata/RHSA-2009-0421.html
- http://www.redhat.com/support/errata/RHSA-2009-0420.html
- http://www.mail-archive.com/fedora-package-announce%40redhat.com/msg11830.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1
- http://www.securityfocus.com/archive/1/502757/100/0/threaded
- http://secunia.com/advisories/34729
- http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
- https://bugzilla.redhat.com/show_bug.cgi?id=229174
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:095
- http://www.securityfocus.com/bid/34337
- http://secunia.com/advisories/34732
- http://secunia.com/advisories/35569
- http://www.vupen.com/english/advisories/2009/1708
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9507
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:096
- http://secunia.com/advisories/35559
- http://secunia.com/advisories/35416
- http://wiki.rpath.com/Advisories:rPSA-2009-0060
- https://bugzilla.redhat.com/show_bug.cgi?id=493442
- https://usn.ubuntu.com/757-1/
- http://www.openwall.com/lists/oss-security/2009/04/01/10
- http://support.avaya.com/elmodocs2/security/ASA-2009-155.htm
- http://secunia.com/advisories/34726
- https://nvd.nist.gov/vuln/detail/CVE-2007-6725