Multiple Security Vulnerabilities in Solaris Ghostscript (GS(1)) May lead to Denial of Service (DoS) or Execution of Arbitrary Code

---

Multiple Security Vulnerabilities in Solaris Ghostscript (GS(1)) May lead to Denial of Service (DoS) or Execution of Arbitrary Code

1. Impact

Multiple security vulnerabilities exist in Ghostscript(GS(1)), an interpreter for the PostScript and PDF language. Ghostscript is bundled with Solaris 9 and Solaris 10.

These issues may allow local or remote unprivileged users to supply specially crafted PostScript or PDF files, thereby causing a Denial of Service (DoS) condition to applications using the Ghostscript interpreter, or lead to execution of arbitrary code with the privileges of the user running Ghostscript.

Additional information regarding these issues is available at:


2. Contributing Factors

These issues can occur in the following releases:

SPARC Platform

• Solaris 9 without patch 115835-04
• Solaris 10 without patch 122259-02
• OpenSolaris based upon builds snv_01 through snv_114

x86 Platform

• Solaris 9 without patch 115836-04
• Solaris 10 without patch 122260-02
• OpenSolaris based upon builds snv_01 through snv_114

Note: Solaris 8 does not include support for Ghostscript and therefore is not impacted by these issues.

OpenSolaris distributions may include additional bug fixes above and beyond the build from which it was derived. The base build can be derived as follows:

$ uname -v
snv_86

3. Symptoms

There are no predictable symptoms that would indicate these issues have been exploited.

4. Workaround

Until patches can be installed, users should avoid processing PostScript and PDF files from untrusted sources.

5. Resolution

These issues are addressed in the following releases:

SPARC Platform

• Solaris 9 with patch 115835-04 or later
  
• Solaris 10 with patch 122259-02 or later
• OpenSolaris based upon builds snv_115 or later

x86 Platform

• Solaris 9 with patch 115836-04 or later
  
• Solaris 10 with patch 122260-02 or later
• OpenSolaris based upon builds snv_115 or later

For more information on Security Sun Alerts, see Technical Instruction ID 213557.

This Sun Alert notification is being provided to you on an "AS IS" basis. This Sun Alert notification may contain information provided by third parties. The issues described in this Sun Alert notification may or may not impact your system(s). Sun makes no representations, warranties, or guarantees as to the information contained herein. ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT YOU ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE OUT OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN. This Sun Alert notification contains Sun proprietary and confidential information. It is being provided to you pursuant to the provisions of your agreement to purchase services from Sun, or, if you do not have such an agreement, the Sun.com Terms of Use. This Sun Alert notification may only be used for the purposes contemplated by these agreements.

Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved.


Modification History

14-Sep-2009: Updated Contributing Factors and Resolution sections; now Resolved

Attachments

This solution has no attachment