CVE-2009-0196

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-16 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run length value.

Affected products

ghostscript: through 8.64; 0, 5.50, 7.07, 8.0.1, 8.15, 8.15.2 (+7)

References

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
http://osvdb.org/53492
http://secunia.com/advisories/34292
http://secunia.com/advisories/34667
http://secunia.com/advisories/34729
http://secunia.com/advisories/34732
http://secunia.com/advisories/35416
http://secunia.com/advisories/35559
http://secunia.com/advisories/35569
http://secunia.com/secunia_research/2009-21/
http://security.gentoo.org/glsa/glsa-201412-17.xml

Get alerted when CVE-2009-0196 or the next vulnerability affects your stack