CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions,...
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- Updated
- 2026-11-02
EUVDEUVD-2008-6641No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
EUVD-2008-6641- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p24-mjw7-mgwhNo score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions,...
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
GHSA-6p24-mjw7-mgwh- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-6679No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
DEBIAN-CVE-2008-6679- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 | before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:13 | before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:14 | before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:5.0 From an advisory covering 7 CVEs | before 8.62.dfsg.1-3.2lenny4, plus listed versions 8.62.dfsg.1-3.2lenny08.62.dfsg.1-3.2lenny18.62.dfsg.1-3.2lenny2 | 8.62.dfsg.1-3.2lenny4 |
ghostscriptRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscriptRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-gtkRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-gtkRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6679 is a medium vulnerability (CVSS 5.0) in Ghostscript, published April 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.50%, the 91st percentile. Fixed in ghostscript 8.64~dfsg-1.
References
redhat.com/support/errata/RHSA-2009-0421.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10019
sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1
securityfocus.com/archive/1/502757/100/0/threaded
secunia.com/advisories/34729
Show 34 moreShow less
bugs.ghostscript.com/show_bug.cgi?id=690211
lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
mandriva.com/security/advisories?name=MDVSA-2009:095
vupen.com/english/advisories/2009/1708
bugzilla.redhat.com/show_bug.cgi?id=493445
wiki.rpath.com/Advisories:rPSA-2009-0060
usn.ubuntu.com/757-1
openwall.com/lists/oss-security/2009/04/01/10
nvd.nist.gov/vuln/detail/CVE-2008-6679
github.com/advisories/GHSA-6p24-mjw7-mgwh
security-tracker.debian.org/tracker/CVE-2008-6679
access.redhat.com/errata/RHSA-2009:0421
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0421.json
cve.org/CVERecord?id=CVE-2007-6725