Summary
This host is installed with Ghostscript and is prone to arbitrary code execution vulnerability.
Impact
Successful exploitation allows the attackers to execute arbitrary code or cause a denial of service.
Impact Level: Application
Solution
Upgrade to Ghostscript version 8.71 or later,
For updates refer to http://www.ghostscript.com/
Insight
The flaw is due to Off-by-one error in the TrueType bytecode interpreter in Ghostscript that allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document.
Affected
Ghostscript versions prior to 8.71
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-3743 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Flash Player Buffer Overflow Vulnerability - Apr14 (Windows)
- Adobe AIR Multiple Vulnerabilities -01 April 13 (Mac OS X)
- Adobe Acrobat Multiple Vulnerabilities-01 Sep14 (Mac OS X)
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)
- Adobe AIR Multiple Vulnerabilities-01 Jun14 (Mac OS X)