CVE-2015-3228

CVE-2015-3228 : Ghostscript 9.15 and earlier contains an integer overflow in gs_heap_alloc_bytes (base/gsmalloc.c) that can trigger an out-of-bounds read/write through a crafted PostScript file, as demonstrated via ps2pdf, causing denial of service (crash). Connected sources confirm the affected ...

CVE-2015-3228

Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service crash via a crafted Postscript ps file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write...

MGASA-2015-0308 Updated ghostscript package fixes security vulnerability

GhostScript is vulnerable to an integer overflow when processing a crafted PostScript file using the ps2pdf command CVE-2015-3228...

Updated ghostscript package fixes security vulnerability

GhostScript is vulnerable to an integer overflow when processing a crafted PostScript file using the ps2pdf command CVE-2015-3228...

openSUSE Security Update : ghostscript (openSUSE-2015-537)

Ghostscript was updated to fix one security issue. The following vulnerability was fixed : - CVE-2015-3228: Specially crafted files could have caused an interger overflow, resulting in a crash of the application or unspecified other impact bsc939342 %NASLMINLEVEL 70300 C Tenable Network Security,...

[USN-2697-1] Ghostscript vulnerability

========================================================================== Ubuntu Security Notice USN-2697-1 July 30, 2015 ghostscript vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Debian DSA-3326-1 : ghostscript - security update

William Robinet and Stefan Cornelius discovered an integer overflow in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or potentially execution of arbitrary code if a specially crafted file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

ghostscript memory corruption

Memory corruption on Postscript file parsing...

[SECURITY] [DSA 3326-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3326-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3326-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3326-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2015 https://www.debian.org/security/faq -...

DSA-3326-1 ghostscript - security update

Bulletin has no description...

Debian Security Advisory DSA 3326-1 (ghostscript - security update)

William Robinet and Stefan Cornelius discovered an integer overflow in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or potentially execution of arbitrary code if a specially crafted file is opened. OpenVAS Vulnerability Test $Id: deb3326.nasl 6609...

Debian: Security Advisory (DSA-3326-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2697-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Ghostscript vulnerability (USN-2697-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2697-1 advisory. William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked int...

USN-2697-1 ghostscript vulnerability

William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code...

USN-2697-1: Ghostscript vulnerability

William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code...

Artifex Software Ghostscript's/base/gsmalloc.c' Remote Integer Overflow Vulnerability

PostScript PS is a page description language and programming language used in the electronics industry and desktop publishing.Artifex Software Ghostscript is an open-source PostScript parser from Artifex Software that displays Postscript files and prints Postscript files on non-PostScript printer...

Debian DLA-280-1 : ghostscript security update

In gsheapallocbytes, add a sanity check to ensure we don't overflow the variable holding the actual number of bytes we allocate. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and...

[SECURITY] [DLA 280-1] ghostscript security update

Package : ghostscript Version : 8.71dfsg2-9+squeeze2 CVE ID : CVE-2015-3228 Debian Bug : 793489 In gsheapallocbytes, add a sanity check to ensure we dont overflow the variable holding the actual number of bytes we allocate...