PIL-RCE-Ghostscript-CVE-2018-16509

Python PIL/Pillow를 통한 Ghostscript CVE-2018-16509 원격 셸 명령 실행 다음에서 영감을 얻었습니다: https://github.com/ysrc/PIL-RCE-By-GhostButt CVE-2017-8291을 통한 PIL/Pillow RCE. 이 도커 환경 버전은 최신 버전의 Ghostscriptv9.23와 최신 익스플로잇CVE-2018-16509을 사용합니다. Ghostscript는 Adobe Systems PostScript 및 PDF휴대용 문서 형식 페이지 설명 언어를 위한 해석기를 기반...

CVE-2018-16509

CVE-2018-16509 Ghostscript에는 여러 -dSAFER 샌드박스 우회 취약점이 포함되어 있습니다. 실행 $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF 미리보기 익스플로잇 PoC 이 익스플로잇은 PostScript 출력이 반영되지 않지만 png 이미지를 통한 PDF 미리보기 등으로 실행되는 GS 환경에서 CVE-2019-14811을 대상으로 합니다. 익스플로잇은 pngXXm 미리보기에서 직접 명령을 렌더링하며, https://github.com/hhc0null/GhostRule/blob/master/ghostrule1.ps 을 기반으로 합니다. dSafer 플래그는 .pdfhookDSCCreator를 통한 .forcepu...

EUVD-2019-5942

Malware in sbrugna...

EUVD-2019-5984

Malware in sbrugna...

CVE-1999-0155

The ghostscript command with the -dSAFER option allows remote attackers to execute commands...

CVE-2018-15908

It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...

MGASA-2021-0436 Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

The vulnerability of the .tempfile component in the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to circumvent the dSAFER protection mechanism, delete files, or gain unauthorized access to protected information.

The vulnerability of the .tempfile component in the software for processing, transforming, and generating Ghostscript documents is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass the dSAFER protection, delete files, or gain unauthorized...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2016-1050)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-10216: Incorrect Use of Privileged APIs

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

OPENSUSE-SU-2019:2534-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. This update was imported from the SUSE:SLE-15:Update update project...

MGASA-2019-0336 Updated ghostscript packages fix security vulnerability

The updated packages fix a security vulnerability: -dSAFER escape in .charkeys. CVE-2019-14869...

Information Disclosure

ghostscript is vulnerable to information disclosure. The vulnerability exists due to -dSAFER escape in .charkeys...

Debian: Security Advisory (DLA-1992-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-14869: Incorrect Use of Privileged APIs

A flaw was found in all versions of ghostscript 9.x before 9.50, where the .charkeys procedure, where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could...

CVE-2018-15909

It was discovered that the ghostscript .shfill operator did not properly validate certain types. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScript...

Debian: Security Advisory (DLA-1915-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1915-1 : ghostscript security update

It was discovered that various procedures in Ghostscript, the GPL PostScript/PDF interpreter, do not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox. For Debian 8 'Jessie', these problems have been fixed in version...