6636 matches found
PT-2024-40781 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object and stream dct finalize. No...
PT-2024-40783 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object, gs memory chunk unwrap, and gs j...
PT-2024-40782 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as chunk free object, s zlib free, and inflateEnd. No...
Low: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: Divide by zero in epsprintpage in gdevepsn.c CVE-2020-21710 For more...
ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in pdf_save_viewer_state
Detailed Report: https://oss-fuzz.com/testcase?key=4871770673840128 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x52900005ec78 Crash State:...
Remote Code Execution
Ghostscript, the GPL PostScript/PDF interpreter is vulnerable to Remote Code Execution. The vulnerability is due to multiple security issues which can result in denial of service and potentially the execution of arbitrary code if malformed document files are processed...
ghostscript:gs_device_psdcmyk_fuzzer: Crash in cmap_cmyk_direct
Detailed Report: https://oss-fuzz.com/testcase?key=5086237751836672 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepsdcmykfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x52a265497270 Crash State: cmapcmykdirect...
ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in text_to_stream
Detailed Report: https://oss-fuzz.com/testcase?key=5814226340872192 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x529000063990 Crash State:...
Mageia: Security Advisory (MGASA-2024-0180)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.6 : ghostscript (EulerOS-SA-2024-1649)
According to the versions of the ghostscript packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the...
Updated ghostscript packages fix security vulnerability
An issue was discovered in Artifex Ghostscript through 10.01.0. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard. CVE-2023-52722...
MGASA-2024-0180 Updated ghostscript packages fix security vulnerability
An issue was discovered in Artifex Ghostscript through 10.01.0. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard. CVE-2023-52722...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2024-1649)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-5692 : ghostscript - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5692 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5692-1 [email protected]...
Debian: Security Advisory (DSA-5692-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5692-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5692-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 15, 2024 https://www.debian.org/security/faq -...
ghostscript:gstoraster_pdf_fuzzer: Segv on unknown address in gs_gc_reclaim
Detailed Report: https://oss-fuzz.com/testcase?key=5144492507201536 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsgcreclaim ireclaim...
Important: ghostscript
Issue Overview: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 Affected Packages: ghostscript Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...
Important: ghostscript
Issue Overview: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 Affected Packages: ghostscript Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...