WS-2022-0106

In ghostscript before ghostpdl-9.57.0, there is fix division by zero causing matrix with NaNs. This in turn causes MININT phases, which upsets stuff in the graphics library when attempting to fit a tile to a device in copymono...

ghostscript:gstoraster_fuzzer: Crash in s_RLE_process

Detailed Report: https://oss-fuzz.com/testcase?key=5009065605988352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x629ff033a118 Crash State: sRLEprocess cmdputbits...

ghostscript:gstoraster_fuzzer: Crash in pdf14_buf_free

Detailed Report: https://oss-fuzz.com/testcase?key=6390481371660288 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffff8000 Crash State: pdf14buffree rcpdf14maskbuffre...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in fn_ElIn_evaluate

Detailed Report: https://oss-fuzz.com/testcase?key=5393468866822144 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f7ffeafd844 Crash State: fnElInevaluat...

ghostscript:gstoraster_fuzzer: Crash in pdfi_fapi_get_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5595824338370560 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000015c80000 Crash State: pdfifapigetglyph...

ghostscript:gstoraster_fuzzer: Crash in spgetcc

Detailed Report: https://oss-fuzz.com/testcase?key=6076188597026816 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a1002ebc0b Crash State: spgetcc pdfireadbyte...

OESA-2022-1560 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting...

ghostscript:gstoraster_fuzzer: Null-dereference READ in gstate_clone_core

Detailed Report: https://oss-fuzz.com/testcase?key=5571707845345280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: gstateclonecore gsgsa...

ghostscript:gstoraster_fuzzer: Crash in pdfi_read_cff_font

Detailed Report: https://oss-fuzz.com/testcase?key=6111748510318592 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62d1000be438 Crash State: pdfireadcfffont pdfiloadfont...

WS-2022-0094

Ghostscript version through 9.56.0 are vulnerable to UNKNOWN READ in pdficountcffindex...

ghostscript:gstoraster_fuzzer: Crash in pdfi_count_cff_index

Detailed Report: https://oss-fuzz.com/testcase?key=4696419984867328 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62cff772e358 Crash State: pdficountcffindex...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in spgetcc

Detailed Report: https://oss-fuzz.com/testcase?key=6721440936755200 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62a000005050 Crash State: spgetcc gsscantok...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gstate_free_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5019015288848384 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State: gstatefreeconten...

Ghostscript 9.50 < 9.55.0 Sandbox Escape Vulnerability - Linux

Ghostscript is prone to a sandbox escape vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in check_user_password_preR5

Detailed Report: https://oss-fuzz.com/testcase?key=6657097855533056 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fc81a1c1840 Crash State:...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gstate_free_contents

Detailed Report: https://oss-fuzz.com/testcase?key=6201284829511680 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State: gstatefreeconten...

Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.

Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without...

ghostscript:gstoraster_fuzzer: Crash in gx_dc_default_fill_masked

Detailed Report: https://oss-fuzz.com/testcase?key=5097021625729024 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6310100f6f40 Crash State: gxdcdefaultfillmasked...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in pdfi_dict_get_no_store_R_inner

Detailed Report: https://oss-fuzz.com/testcase?key=5759193200590848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x631000a9c830 Crash State:...

CVE-2021-3781

A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...