CVE-2009-3743

CVE-2009-3743 describes an off-by-one error in the TrueType bytecode interpreter within Ghostscript versions prior to 8.71, affecting products like artifex afpl_ghostscript, artifex ghostscript_fonts, and artifex gpl_ghostscript. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service through heap memory corruption. The severity is critical, with a CVSS score of 9.3, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.