CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions,...
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- Updated
- 2026-11-02
EUVDEUVD-2008-6641 No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
EUVD-2008-6641- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p24-mjw7-mgwh No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions,...
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
GHSA-6p24-mjw7-mgwh- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
CVE-2008-6679- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-6679 No score
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
- Record
DEBIAN-CVE-2008-6679- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 |
before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:13 |
before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:14 |
before 8.64~dfsg-1 | 8.64~dfsg-1 |
ghostscriptDebian:5.0 |
before 8.62.dfsg.1-3.2lenny4, plus listed versions 8.62.dfsg.1-3.2lenny08.62.dfsg.1-3.2lenny18.62.dfsg.1-3.2lenny2 |
8.62.dfsg.1-3.2lenny4 |
ghostscriptRed Hat:enterprise_linux:5::client_workstation |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-develRed Hat:enterprise_linux:5::client_workstation |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscriptRed Hat:enterprise_linux:5::client |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-gtkRed Hat:enterprise_linux:5::client |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscriptRed Hat:enterprise_linux:5::server |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::server |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-develRed Hat:enterprise_linux:5::server |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
ghostscript-gtkRed Hat:enterprise_linux:5::server |
before 0:8.15.2-9.4.el5_3.7 | 0:8.15.2-9.4.el5_3.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6679 is a medium vulnerability (CVSS 5.0) in Ghostscript, published April 8, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.50%, the 91st percentile. Fixed in ghostscript 8.64~dfsg-1.
References
redhat.com/support/errata/RHSA-2009-0421.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10019
sunsolve.sun.com/search/document.do?assetkey=1-26-262288-1
securityfocus.com/archive/1/502757/100/0/threaded
secunia.com/advisories/34729
Show 34 moreShow less
bugs.ghostscript.com/show_bug.cgi?id=690211
lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
mandriva.com/security/advisories?name=MDVSA-2009:095
vupen.com/english/advisories/2009/1708
bugzilla.redhat.com/show_bug.cgi?id=493445
wiki.rpath.com/Advisories:rPSA-2009-0060
usn.ubuntu.com/757-1
openwall.com/lists/oss-security/2009/04/01/10
nvd.nist.gov/vuln/detail/CVE-2008-6679
github.com/advisories/GHSA-6p24-mjw7-mgwh
security-tracker.debian.org/tracker/CVE-2008-6679
access.redhat.com/errata/RHSA-2009:0421
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0421.json
cve.org/CVERecord?id=CVE-2007-6725