oss-security - CVE request: ghostscript

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <1278952119.2863.15.camel@mdlinux.technorage.com>
Date: Mon, 12 Jul 2010 12:28:39 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE request: ghostscript

Hi,

I don't think this ever got a CVE:

A memory corruption vulnerability in Ghostscript 8.64 and earlier caused
by long names can lead to arbitrary code execution.

http://bugs.ghostscript.com/show_bug.cgi?id=690523
http://svn.ghostscript.com/viewvc?view=rev&revision=9797

Thanks,

Marc.

-- 
Marc Deslauriers
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.