CVE-2008-0411: Ghostscript

Medium severity, CVSS 6.8. EPSS: 14.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.

Affected products

• Ghostscript Ghostscript: up to and including 8.61; version 0 only; version 8.0.1 only; version 8.15 only

Published 2008-02-28. Last modified 2026-06-16.