ghostscript:gstoraster_fuzzer: Stack-buffer-underflow in read_xref

Detailed Report: https://oss-fuzz.com/testcase?key=6186925189365760 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow WRITE 1 Crash Address: 0x7f42c7439f1f Crash State: readxref...

ghostscript:gstoraster_fuzzer: Segv on unknown address in cs_adjust_counts_icc

Detailed Report: https://oss-fuzz.com/testcase?key=5638552019402752 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: csadjustcountsicc gstateclonecore...

ghostscript:gstoraster_fuzzer: Crash in pdfi_open_memory_stream_from_filtered_stream

Detailed Report: https://oss-fuzz.com/testcase?key=4830077106388992 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x631000050858 Crash State:...

ghostscript:gstoraster_fuzzer: Segv on unknown address in pdfi_dereference

Detailed Report: https://oss-fuzz.com/testcase?key=4567927603462144 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: pdfidereference pdfigetchild...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in stell

Detailed Report: https://oss-fuzz.com/testcase?key=6001358510096384 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x61500000ce83 Crash State: stell...

ghostscript:gstoraster_fuzzer: Memcpy-param-overlap in pdfi_set_input_stream

Detailed Report: https://oss-fuzz.com/testcase?key=4781511948238848 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x631000054979,0x631000054980 and 0x63100005497f,...

ghostscript:gstoraster_fuzzer: Global-buffer-overflow in search_table_1

Detailed Report: https://oss-fuzz.com/testcase?key=6284166386286592 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002cdccfb Crash State: searchtable1...

Ghostscript Arbitrary Command Execution

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to deficiencies in the transformation of data types within the .rsdparams operator. Exploiting this vulnerability allows an attacker to execute arbitrary commands and bypass the .dSAFER...

Debian DLA-2796-1 : jbig2dec - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2796 advisory. Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL...

Solaris 10 (sparc) : 122259-10

SunOS 5.10: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Oct/18/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc";...

Solaris 10 (x86) : 122260-10

SunOS 5.10x86: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Oct/18/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

Command injection

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

CVE-2021-24684

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

PT-2021-16194

Name of the Vulnerable Software and Affected Versions WordPress PDF Light Viewer Plugin versions prior to 1.4.12 Description The issue allows users with Author roles to execute arbitrary OS commands on the server via OS Command Injection when invoking Ghostscript. Recommendations For versions pri...

CVE-2021-24684: Improper Neutralization of Special Elements used in an OS Command

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript...

WordPress Plugin: Operating System Command Injection Vulnerability

WordPress plugin is a WordPress open source application plugin . WordPress PDF Light Viewer plugin version 1.4.12 before the existence of operating system command injection vulnerability, an attacker can exploit the vulnerability in the call Ghostscript through the OS command injection on the...

Fedora: Security Advisory for ghostscript (FEDORA-2021-49d98b15e7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: ghostscript-9.54.0-4.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...