USN-1581-1: Ghostscript vulnerability

Releases

• Ubuntu 10.04
• Ubuntu 8.04

Packages

• ghostscript - The GPL Ghostscript PostScript/PDF interpreter

Details

Marc Schönefeld discovered that Ghostscript did not correctly handle
certain image files. If a user or automated system were tricked into
opening a specially crafted file, an attacker could cause a denial of
service and possibly execute arbitrary code with user privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04

• libgs8 - 8.61.dfsg.1-1ubuntu3.5

Ubuntu 10.04

• libgs8 - 8.71.dfsg.1-0ubuntu5.5

In general, a standard system update will make all the necessary changes.

References

• CVE-2012-4405