| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | = 0= 5.50= 7.07= 8.0.1= 8.15= 8.15.2= 8.54= 8.56= 8.57= 8.60= 8.61= 8.62= 8.63≤ 8.64 |
Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free