Description
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ghostscript | 8.71~dfsg2-4 | — |
| Debian 13 | ghostscript | 8.71~dfsg2-4 | — |
| Debian 12 | ghostscript | 8.71~dfsg2-4 | — |
| Debian 5.0 | ghostscript | 8.62.dfsg.1-3.2lenny5 | DSA-2093-1 |
Advisories 1
- DSA-2093-1 ghostscript - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- 39753 third-party-advisory
- 20100511 Multiple memory corruption vulnerabilities in Ghostscript mailing-list
- GLSA-201412-17 vendor-advisory
- 40107 vdb-entry
- MDVSA-2010:134 vendor-advisory
- [oss-security] 20100518 Re: CVE assignment: ghostscript stack-based overflow mailing-list
- ADV-2010-1138 vdb-entry
- USN-961-1 vendor-advisory
- http://bugs.ghostscript.com/show_bug.cgi?id=691295
- 40580 third-party-advisory
- SUSE-SR:2010:014 vendor-advisory
- 20100512 Multiple memory corruption vulnerabilities in Ghostscript mailing-list
- [oss-security] 20100511 Re: CVE assignment: ghostscript stack-based overflow mailing-list
- https://bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009