{"schemaVersion":3,"id":"CVE-2008-0411","aliases":["RHSA-2008:0155","DEBIAN-CVE-2008-0411","DSA-1510-1"],"status":"published","duplicateOf":null,"title":null,"description":"Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.","dates":{"published":"2008-02-28T21:00:00.000Z","modified":"2024-08-07T07:46:54.069Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.14523,"percentile":0.96614,"severity":"medium","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.11400000000000021,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.14409},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.14523,"percentile":0.96614}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14409,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.14523,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.14523,"percentile":0.96614}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_D8BC48B3CA46A96A","name":"Exploit Reference (scary.beasts.org)","source":"reference","url":"http://scary.beasts.org/security/CESA-2008-001.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"31309","name":"Ghostscript 8.0.1/8.15 - 'zseticcspace()' Remote Buffer Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/31309","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/31309.c","codes":["CVE-2008-0411","OSVDB-42310"]},"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"debian","product":"ghostscript","name":"ghostscript","label":"ghostscript","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/ghostscript","purlType":"deb","versions":[{"text":"< 8.61.dfsg.1-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.61.dfsg.1-1.1","eol":null,"hubHref":null},{"vendor":"debian","product":"gs-esp","name":"gs-esp","label":"gs-esp","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/gs-esp","purlType":"deb","versions":[{"text":"< 7.07.1-9sarge1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.15.3.dfsg.1-1etch1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.07.1-9sarge1 | < 8.15.3.dfsg.1-1etch1","eol":null,"hubHref":null},{"vendor":"debian","product":"gs-gpl","name":"gs-gpl","label":"gs-gpl","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/gs-gpl","purlType":"deb","versions":[{"text":"< 8.01-6","noFixRecorded":false,"fixedIn":null},{"text":"< 8.54.dfsg.1-5etch1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.01-6 | < 8.54.dfsg.1-5etch1","eol":null,"hubHref":null},{"vendor":"ghostscript","product":"ghostscript","name":"ghostscript","label":"ghostscript","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 8.61","noFixRecorded":false,"fixedIn":null},{"text":"0","noFixRecorded":false,"fixedIn":null},{"text":"8.0.1","noFixRecorded":false,"fixedIn":null},{"text":"8.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 8.61 | 0 | 8.0.1 | 8.15","eol":null,"hubHref":"/vendor/ghostscript/ghostscript"},{"vendor":"redhat","product":"ghostscript","name":"ghostscript","label":"ghostscript","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/ghostscript","purlType":"rpm","versions":[{"text":"< 0:7.05-32.1.13","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.07-33.2.el4_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:8.15.2-9.1.el5_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.05-32.1.13 | < 0:7.07-33.2.el4_6.1 | < 0:8.15.2-9.1.el5_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"ghostscript-debuginfo","name":"ghostscript-debuginfo","label":"ghostscript-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/ghostscript-debuginfo","purlType":"rpm","versions":[{"text":"< 0:7.05-32.1.13","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.07-33.2.el4_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:8.15.2-9.1.el5_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.05-32.1.13 | < 0:7.07-33.2.el4_6.1 | < 0:8.15.2-9.1.el5_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"ghostscript-devel","name":"ghostscript-devel","label":"ghostscript-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/ghostscript-devel","purlType":"rpm","versions":[{"text":"< 0:7.05-32.1.13","noFixRecorded":false,"fixedIn":null},{"text":"< 0:7.07-33.2.el4_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:8.15.2-9.1.el5_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.05-32.1.13 | < 0:7.07-33.2.el4_6.1 | < 0:8.15.2-9.1.el5_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"ghostscript-gtk","name":"ghostscript-gtk","label":"ghostscript-gtk","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/ghostscript-gtk","purlType":"rpm","versions":[{"text":"< 0:7.07-33.2.el4_6.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0:8.15.2-9.1.el5_1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.07-33.2.el4_6.1 | < 0:8.15.2-9.1.el5_1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"hpijs","name":"hpijs","label":"hpijs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hpijs","purlType":"rpm","versions":[{"text":"< 0:1.3-32.1.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.3-32.1.13","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/29103","label":"secunia.com/advisories/29103","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://www.ubuntu.com/usn/usn-599-1","label":"www.ubuntu.com/usn/usn-599-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200803-14.xml","label":"www.gentoo.org/security/en/glsa/glsa-200803-14.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Patch"]},{"url":"http://secunia.com/advisories/29154","label":"secunia.com/advisories/29154","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://secunia.com/advisories/29196","label":"secunia.com/advisories/29196","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488946/100/0/threaded","label":"www.securityfocus.com/archive/1/488946/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0693/references","label":"www.vupen.com/english/advisories/2008/0693/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Not Applicable"]},{"url":"http://secunia.com/advisories/29314","label":"secunia.com/advisories/29314","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/488932/100/0/threaded","label":"www.securityfocus.com/archive/1/488932/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9557","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://secunia.com/advisories/29101","label":"secunia.com/advisories/29101","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://wiki.rpath.com/Advisories:rPSA-2008-0082","label":"wiki.rpath.com/Advisories:rPSA-2008-0082","hostname":"wiki.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/29112","label":"secunia.com/advisories/29112","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html","label":"lists.opensuse.org/opensuse-security-announce/2008-02/msg00009.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29147","label":"secunia.com/advisories/29147","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:055","label":"www.mandriva.com/security/advisories?name=MDVSA-2008:055","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-2217","label":"issues.rpath.com/browse/RPL-2217","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/29768","label":"secunia.com/advisories/29768","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://www.securitytracker.com/id?1019511","label":"www.securitytracker.com/id?1019511","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://www.debian.org/security/2008/dsa-1510","label":"www.debian.org/security/2008/dsa-1510","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0155.html","label":"www.redhat.com/support/errata/RHSA-2008-0155.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/28017","label":"www.securityfocus.com/bid/28017","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2008-001.html","label":"scary.beasts.org/security/CESA-2008-001.html","hostname":"scary.beasts.org","tags":["X Refsource MISC","Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html","label":"www.redhat.com/archives/fedora-package-announce/2008-March/msg00085.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA","Release Notes","Third Party Advisory"]},{"url":"http://secunia.com/advisories/29135","label":"secunia.com/advisories/29135","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://secunia.com/advisories/29169","label":"secunia.com/advisories/29169","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","URL Repurposed"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633","label":"slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.370633","hostname":"slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE","Mailing List"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0155","label":"access.redhat.com/errata/RHSA-2008:0155","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431536","label":"bugzilla.redhat.com/show_bug.cgi?id=431536","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0155.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0155.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-0411","label":"access.redhat.com/security/cve/CVE-2008-0411","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0411","label":"www.cve.org/CVERecord?id=CVE-2008-0411","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0411","label":"nvd.nist.gov/vuln/detail/CVE-2008-0411","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-0411","label":"security-tracker.debian.org/tracker/CVE-2008-0411","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2008-02-28T21:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T07:46:54.069Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:30:38.659Z","stale":false,"partial":false}}