CVE-2008-0411: ghostscript

EPSS trend

Probability

14.52%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.11 pp

From 14.41% on 19-09-2026

19-09-202619-10-2026

EPSS score

14.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (scary.beasts.org)
Maturity: unknown
exploit-databaseremotelinuxVerified
Ghostscript 8.0.1/8.15 - 'zseticcspace()' Remote Buffer Overflow
Maturity: weaponized

References

35 links

secunia.com/advisories/29103Third Party AdvisoryX Refsource SECUNIAURL Repurposed
www.ubuntu.com/usn/usn-599-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200803-14.xmlVendor AdvisoryX Refsource GENTOOPatch
secunia.com/advisories/29154Third Party AdvisoryX Refsource SECUNIAURL Repurposed
secunia.com/advisories/29196Third Party AdvisoryX Refsource SECUNIAURL Repurposed
www.securityfocus.com/archive/1/488946/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkVDB Entry
www.vupen.com/english/advisories/2008/0693/referencesVDB EntryX Refsource VUPENNot Applicable
secunia.com/advisories/29314Third Party AdvisoryX Refsource SECUNIAURL Repurposed
www.securityfocus.com/archive/1/488932/100/0/threadedMailing ListX Refsource BUGTRAQBroken LinkVDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557VDB EntrySignatureX Refsource OVALBroken Link

Show all 35 references

secunia.com/advisories/29101Third Party AdvisoryX Refsource SECUNIAURL Repurposed
wiki.rpath.com/Advisories:rPSA-2008-0082X Refsource CONFIRMBroken Link
secunia.com/advisories/29112Third Party AdvisoryX Refsource SECUNIAURL Repurposed
lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/29147Third Party AdvisoryX Refsource SECUNIAURL Repurposed
www.mandriva.com/security/advisories?name=MDVSA-2008:055Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
issues.rpath.com/browse/RPL-2217X Refsource CONFIRMBroken Link
secunia.com/advisories/29768Third Party AdvisoryX Refsource SECUNIAURL Repurposed
www.securitytracker.com/id?1019511VDB EntryX Refsource SECTRACKThird Party Advisory
www.debian.org/security/2008/dsa-1510Vendor AdvisoryX Refsource DEBIANPatch
www.redhat.com/support/errata/RHSA-2008-0155.htmlVendor AdvisoryX Refsource REDHATURL Repurposed
www.securityfocus.com/bid/28017VDB EntryX Refsource BIDThird Party Advisory
scary.beasts.org/security/CESA-2008-001.htmlX Refsource MISCExploit
www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.htmlVendor AdvisoryX Refsource FEDORARelease NotesThird Party Advisory
secunia.com/advisories/29135Third Party AdvisoryX Refsource SECUNIAURL Repurposed
secunia.com/advisories/29169Third Party AdvisoryX Refsource SECUNIAURL Repurposed
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633Vendor AdvisoryX Refsource SLACKWAREMailing List
access.redhat.com/errata/RHSA-2008:0155Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=431536REPORT
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0155.jsonAdvisory
access.redhat.com/security/cve/CVE-2008-0411REPORT
www.cve.org/CVERecord?id=CVE-2008-0411Advisory
nvd.nist.gov/vuln/detail/CVE-2008-0411Advisory
security-tracker.debian.org/tracker/CVE-2008-0411Advisory

Related vulnerabilities

CVE-2007-6725debianghostscript+14.84%17y ago08-04-2009 16:00The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.CVE-2008-6679debianghostscript+14.50%17y ago08-04-2009 16:00Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.CVE-2012-4405argyllcmscms+97.49%14y ago18-09-2012 17:00Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) PostScript or (2) PDF file with embedded images, which triggers a heap-based buffer overflow. NOTE: this issue is also described as an array index error.CVE-2010-4820debianghostscript+10.47%11y ago27-10-2014 01:00Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.CVE-2009-0792argyllcmsargyllcms+33.99%17y ago14-04-2009 16:00Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.CVE-2009-0583argyllcmsargyllcms+34.75%17y ago23-03-2009 19:26Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.

All vulnerabilities inghostscript

CVE-2008-0411: ghostscript

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References