CVE-2007-6725: Ghostscript

High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days.

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.

Affected products

• Ghostscript Ghostscript: version 8.61 only

Published 2009-04-08. Last modified 2026-06-16.