製品・ソフトウェアに関する情報

JVN脆弱性詳細

Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性

Title	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性
Summary	Ghostscript の zicc.c には、zseticcspace() 関数において、.seticcspace オペレーターの配列処理に不備があるために、postscript (.ps) ファイルによってスタックベースのバッファオーバーフローが発生する脆弱性が存在します。
Possible impacts	第三者により任意のコードを実行される可能性があります。
Solution	ベンダ情報及び参考情報を参照して適切な対策を実施してください。
Publication Date	Feb. 27, 2008, midnight
Registration Date	March 12, 2008, 2:02 p.m.
Last Update	Feb. 17, 2010, 11:43 a.m.

CVSS2.0 : 警告
Score	6
Vector	AV:N/AC:M/Au:S/C:P/I:P/A:P

Affected System

レッドハット

Red Hat Enterprise Linux 3 (as)

Red Hat Enterprise Linux 3 (es)

Red Hat Enterprise Linux 3 (ws)

Red Hat Enterprise Linux 4 (as)

Red Hat Enterprise Linux 4 (es)

Red Hat Enterprise Linux 4 (ws)

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 3.0

Red Hat Enterprise Linux Desktop 4.0

Red Hat Enterprise Linux Desktop 5.0 (client)

RHEL Desktop Workstation 5 (client)

サイバートラスト株式会社

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

Asianux Server 3.0

Asianux Server 3.0 (x86-64)

Asianux Server 4.0

Asianux Server 4.0 (x86-64)

Artifex Software

Ghostscript 8.0.1

Ghostscript 8.15

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2008-0411	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0411
National Vulnerability Database (NVD)
2	CVE-2008-0411	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0411

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Asianux Technical Support Network
1	ghostscript-8.15.2-9.1.2AX	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=113
ghostscript.com
2	Top Page	http://www.ghostscript.com/
MIRACLE LINUX アップデート情報
3	1242	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1242
4	1888	http://www.miraclelinux.com/support/index.php?q=node/99&errata_id=1888
Red Hat Security Advisory
5	RHSA-2008:0155	https://rhn.redhat.com/errata/RHSA-2008-0155.html

その他

No	Name	URL
FrSIRT Advisories
1	FrSIRT/ADV-2008-0693	http://www.frsirt.com/english/advisories/2008/0693
Secunia Advisory
2	SA29103	http://secunia.com/advisories/29103/
SecurityFocus
3	28017	http://www.securityfocus.com/bid/28017

Change Log

No	Changed Details	Date of change
0	[2008年03月12日] 掲載 [2008年03月25日] 影響を受けるシステム：ミラクル・リナックス (1242) の情報追加ベンダ情報：ミラクル・リナックス (1242) を追加 [2008年04月15日] 影響を受けるシステム：ミラクル・リナックス (ghostscript-8.15.2-9.1.2AX) の情報追加ベンダ情報：ミラクル・リナックス (ghostscript-8.15.2-9.1.2AX) を追加 [2010年02月17日] ベンダ情報：ミラクル・リナックス (1888) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2008-0411

Summary	Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
Publication Date	Feb. 29, 2008, 6:44 a.m.
Registration Date	Jan. 29, 2021, 1:30 p.m.
Last Update	Feb. 17, 2024, 1:39 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:ghostscript:ghostscript::::::::			8.61

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:ghostscript:ghostscript:0:::::::*
cpe:2.3:a:ghostscript:ghostscript:8.0.1:::::::*
cpe:2.3:a:ghostscript:ghostscript:8.15:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://scary.beasts.org/security/CESA-2008-001.html	MISC	Exploit
2	http://www.debian.org/security/2008/dsa-1510	DEBIAN	Patch
3	http://www.redhat.com/support/errata/RHSA-2008-0155.html	REDHAT	URL Repurposed
4	http://www.securityfocus.com/bid/28017	BID	Third Party Advisory VDB Entry
5	https://issues.rpath.com/browse/RPL-2217	CONFIRM	Broken Link
6	http://www.mandriva.com/security/advisories?name=MDVSA-2008:055	MANDRIVA	Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html	SUSE	Mailing List Third Party Advisory
8	http://secunia.com/advisories/29101	SECUNIA	URL Repurposed
9	http://secunia.com/advisories/29147	SECUNIA	URL Repurposed
10	http://secunia.com/advisories/29169	SECUNIA	URL Repurposed
11	http://wiki.rpath.com/Advisories:rPSA-2008-0082	CONFIRM	Broken Link
12	https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html	FEDORA	Release Notes Third Party Advisory
13	http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633	SLACKWARE	Mailing List
14	http://www.securitytracker.com/id?1019511	SECTRACK	Third Party Advisory VDB Entry
15	http://secunia.com/advisories/29103	SECUNIA	URL Repurposed
16	http://secunia.com/advisories/29112	SECUNIA	URL Repurposed
17	http://secunia.com/advisories/29135	SECUNIA	URL Repurposed
18	http://secunia.com/advisories/29196	SECUNIA	URL Repurposed
19	http://secunia.com/advisories/29154	SECUNIA	URL Repurposed
20	http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml	GENTOO	Patch
21	http://secunia.com/advisories/29314	SECUNIA	URL Repurposed
22	http://www.ubuntu.com/usn/usn-599-1	UBUNTU	Third Party Advisory
23	http://secunia.com/advisories/29768	SECUNIA	URL Repurposed
24	http://www.vupen.com/english/advisories/2008/0693/references	VUPEN	Not Applicable
25	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557	OVAL	Broken Link
26	http://www.securityfocus.com/archive/1/488946/100/0/threaded	BUGTRAQ	Broken Link VDB Entry
27	http://www.securityfocus.com/archive/1/488932/100/0/threaded	BUGTRAQ	Broken Link VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html