Buffer Overflow Vulnerability in Ghostscript Affects Multiple Versions
CVE-2009-4897

Currently unrated

Key Information:

Vendor: Artifex
Status: Gpl Ghostscript; Afpl Ghostscript; Ghostscript Fonts
Vendor: CVE Published:; 22 July 2010

What is CVE-2009-4897?

A buffer overflow vulnerability exists in Ghostscript that can be exploited by remote attackers using specially crafted PDF documents. Specifically, the flaw is located in the 'iscan.c' file and can lead to arbitrary code execution or cause a denial of service due to memory corruption when handling long names within PDF files. This vulnerability poses a significant risk to systems running affected versions of Ghostscript if they process untrusted or malicious PDF content.