CVE:CVE-2008-0411
CNNVD:CNNVD-200802-495
Ghostscript的zicc.c中的zseticcspace函数存在栈缓冲区溢出漏洞。远程攻击者可以借助.seticcspace operator中的长的系列数组的postscript (.ps)文件执行任意代码。
solution:Upgrade ghostscript ghostscript to a higher version than 8.61,0,8.0.1,8.15,and avoid the version (,8.61],0,8.0.1,8.15