Your submission was sent successfully! Close

CVE-2007-6725

Published: 8 April 2009

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.

Priority

Medium

Status

Package Release Status
ghostscript
Launchpad, Ubuntu, Debian
dapper Does not exist

gutsy Needed
(reached end-of-life)
hardy
Released (8.61.dfsg.1-1ubuntu3.2)
intrepid Not vulnerable
(8.63.dfsg.1-0ubuntu6.3)
jaunty Not vulnerable
(8.64.dfsg.1-0ubuntu7)
karmic Not vulnerable
(8.64.dfsg.1-0ubuntu7)
upstream Needs triage

gs-afpl
Launchpad, Ubuntu, Debian
dapper Ignored
(reached end-of-life)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needs triage

gs-esp
Launchpad, Ubuntu, Debian
dapper
Released (8.15.2.dfsg.0ubuntu1-0ubuntu1.2)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needs triage

gs-gpl
Launchpad, Ubuntu, Debian
dapper
Released (8.15-4ubuntu3.3)
gutsy Does not exist

hardy Does not exist

intrepid Does not exist

jaunty Does not exist

karmic Does not exist

upstream Needs triage