Unrated severityNVD Advisory· Published Dec 21, 2009· Updated Jun 16, 2026
CVE-2009-4270
CVE-2009-4270
Description
Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported for debug logging code in gdevcups.c in the CUPS output driver.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:ghostscript:ghostscript:8.64:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ghostscript:ghostscript:8.64:*:*:*:*:*:*:*
- cpe:2.3:a:ghostscript:ghostscript:8.70:*:*:*:*:*:*:*
- (no CPE)range: 8.64 - 8.70
Patches
Vulnerability mechanics
References
14- www.securityfocus.com/bid/37410nvdExploit
- secunia.com/advisories/37851nvdVendor Advisory
- www.vupen.com/english/advisories/2009/3597nvdVendor Advisory
- bugs.ghostscript.com/show_bug.cginvd
- lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlnvd
- osvdb.org/61140nvd
- secunia.com/advisories/40580nvd
- security.gentoo.org/glsa/glsa-201412-17.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.openwall.com/lists/oss-security/2009/12/18/1nvd
- www.openwall.com/lists/oss-security/2009/12/18/2nvd
- www.ubuntu.com/usn/USN-961-1nvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.