PIL-RCE-Ghostscript-CVE-2018-16509

Execução Remota de Comandos Shell via Ghostscript CVE-2018-16509 em Python PIL/Pillow Inspirado por https://github.com/ysrc/PIL-RCE-By-GhostButt RCE no PIL/Pillow via CVE-2017-8291. Esta versão do ambiente docker está usando a versão mais recente do Ghostscript v9.23 e o exploit mais recente...

EUVD-2019-5984

Malware in sbrugna...

MGASA-2021-0436 Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

Updated ghostscript packages fix security vulnerability

Trivial -dSAFER bypass in 9.55. CVE-2021-3781...

Artifex Software Ghostscript Access Control Error Vulnerability (CNVD-2019-12758)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

Ghostscript -- arbitrary code execution

CERT reports: Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript operations. Multiple PostScript operations bypass the protections provided by -dSAFER, which can allow an attacker to execute arbitrary commands with arbitrary arguments. This vulnerabili...

Fedora 25 : ghostscript (2017-c85c0e5637)

Security fixes release for these CVEs : - CVE-2016-10217 use-after-free and application crash - CVE-2016-10218 NULL pointer dereference and application crash - CVE-2016-10219 divide-by-zero error and application crash - CVE-2016-10220 NULL pointer dereference and application crash - CVE-2017-5951...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2017:1153-1)

This update for ghostscript fixes the following security vulnerability : - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. bsc1036453 Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE-SU-2017:1153-1 Security update for ghostscript-library

This update for ghostscript fixes the following security vulnerability: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. bsc1036453...