CVE:CVE-2009-0196
CNNVD:CNNVD-200904-338
Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。
Ghostscript所捆绑的jbig2dec库在解码JBIG2符号字典段时存在堆溢出漏洞。如果用户受骗打开了特制的PDF文件的话就可以触发这个溢出，导致Ghostscript崩溃或执行任意代码。
solution:Upgrade ghostscript ghostscript to a higher version than 8.64,0,5.50,7.07,8.0.1,8.15,8.15.2,8.54,8.56,8.57,8.60,8.61,8.62,8.63,and avoid the version (,8.64],0,5.50,7.07,8.0.1,8.15,8.15.2,8.54,8.56,8.57,8.60,8.61,8.62,8.63