USN-5643-1 ghostscript vulnerabilities

It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary cod...

USN-5643-1: Ghostscript vulnerabilities

It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to cause GhostScript to crash, resulting in a denial of service, or possibly execute arbitrary cod...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Ghostscript vulnerabilities (USN-5643-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5643-1 advisory. It was discovered that GhostScript incorrectly handled certain PDF files. If a user or automated system were tricked into opening...

PT-2022-37303 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in s_file_write_flush

Detailed Report: https://oss-fuzz.com/testcase?key=6661891795058688 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x614000027d98 Crash State:...

Ghostscript Buffer Overflow DoS

The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Artifex Ghostscript 9.55 DoS

The version of Artifex Ghostscript installed on the remote Windows host is 9.55. It is, therefore, affected by a NULL pointer dereference vulnerabiulity leading to denial of service. The DoS occurs when Ghostscript tries to render a large number of bits in memory. When allocating a buffer device,...

Ubuntu 16.04 ESM : Ghostscript vulnerability (USN-5618-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5618-1 advisory. It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an...

Ubuntu: Security Advisory (USN-5618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5123070645370880 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHW...

USN-5618-1 ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

USN-5618-1: Ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer over write vulnerability was found in GhostScript's lp8000printpage function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that...

Artifex Ghostscript Remote Code Execution (CVE-2018-16509)

A remote code execution vulnerability exists in Artifex Ghostscript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ghostscript:gs_device_pdfwrite_fuzzer: Segv on unknown address in deflate

Detailed Report: https://oss-fuzz.com/testcase?key=6444829516627968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: deflate szlibEprocess...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=6480202129080320 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHB...

PT-2022-37275 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include a crash state involving functions such as gs type2 interpret, copie...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=4704787672727552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fff31529760 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in Ins_ISECT

Detailed Report: https://oss-fuzz.com/testcase?key=5984645832900608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000071468 Crash State: InsISECT RunIns...