Note: This is an archival copy of Security Sun Alert 262288 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1020647.1.
6830965, 6837966, 6837974, 6841014
Solaris 9 Operating System
Solaris 10 Operating System
Date of Workaround Release
Date of Resolved Release
Multiple Security Vulnerabilities in Solaris Ghostscript (GS(1)) May lead to Denial of Service (DoS) or Execution of Arbitrary Code
Multiple security vulnerabilities exist in Ghostscript(GS(1)), an interpreter for the PostScript and PDF language. Ghostscript is bundled with Solaris 9 and Solaris 10.
These issues may allow local or remote unprivileged users to supply specially crafted PostScript or PDF files, thereby causing a Denial of Service (DoS) condition to applications using the Ghostscript interpreter, or lead to execution of arbitrary code with the privileges of the user running Ghostscript.
Additional information regarding these issues is available at:
CVE-2007-6725 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725
CVE-2008-6679 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679
CVE-2009-0196 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196
CVE-2009-0583 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583
CVE-2009-0584 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584
CVE-2009-0792 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792
2. Contributing Factors
These issues can occur in the following releases:
OpenSolaris distributions may include additional bug fixes above and beyond the build from which it was derived. The base build can be derived as follows:
$ uname -v3. Symptoms
There are no predictable symptoms that would indicate these issues have been exploited.
Until patches can be installed, users should avoid processing PostScript and PDF files from untrusted sources.
These issues are addressed in the following releases:
Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.
14-Sep-2009: Updated Contributing Factors and Resolution sections; now Resolved
This solution has no attachment