CVE-2009-4270
EPSS 8.6%
Description
Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver.
How to fix CVE-2009-4270
To remediate CVE-2009-4270, upgrade the affected package to a fixed version below.
- Debian/ghostscript—upgrade to 8.70~dfsg-2.1 or later
Is CVE-2009-4270 being exploited?
Moderate — EPSS is 8.6%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 8.70~dfsg-2.1