Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Feb 28, 2008 |
| Freebsd | — | Upgrade ghostscript-gplUpgrade ghostscript-gpl-nox11 | Dec 10, 2025 | Mar 5, 2008 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl.Upgrade app-text/ghostscript-esp.Upgrade app-text/ghostscript-gnu. | Oct 30, 2017 | Feb 28, 2008 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript | Oct 16, 2024 | Feb 28, 2008 |
| Suse | — | Upgrade ghostscript-ijs-develUpgrade ghostscript-fonts-rusUpgrade suse-releaseUpgrade libgimpprintUpgrade ghostscript-x11Upgrade ghostscript-omniUpgrade ghostscript-fonts-otherUpgrade ghostscript-servUpgrade ghostscript-fonts-stdUpgrade libgimpprint-develUpgrade ghostscript-library | Feb 17, 2015 | Feb 28, 2008 |
| Ubuntu | — | Upgrade libgs8Upgrade gs-gplUpgrade gs-esp | Nov 8, 2024 | Feb 28, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub