The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade hpijsUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript | Dec 1, 2016 | Apr 8, 2009 |
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Apr 8, 2009 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript | Oct 16, 2024 | Apr 8, 2009 |
| Suse | — | Upgrade ghostscript-libraryUpgrade libgimpprintUpgrade ghostscript-x11Upgrade ghostscript-fonts-otherUpgrade ghostscript-fonts-stdUpgrade ghostscript-omniUpgrade ghostscript-fonts-rus | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade gs-espUpgrade libgs8Upgrade gs-gpl | Nov 8, 2024 | Apr 8, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub