Lucene search
+L

6533 matches found

CVE
CVE
•added 2017/03/21 6:21 a.m.•244 views

CVE-2017-7207

Ghostscript (CVE-2017-7207) describes a NULL pointer dereference in mem_get_bits_rectangle leading to a denial of service via a crafted PostScript. Connected sources confirm this vulnerability affects IBM PowerKVM (PowerKVM 2.1 and 3.1) and are addressed by upgrading to PowerKVM 3.1.0.2 or later ...

5.5CVSS5.6AI score0.02386EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2017/03/21 6:21 a.m.•37 views

CVE-2017-7207

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

6AI score0.02386EPSS
SaveExploits0References7
Mend
Mend
•added 2017/03/21 6:21 a.m.•4 views

CVE-2017-7207

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

6.8CVSS0.02386EPSS
SaveExploits0References10
AlpineLinux
AlpineLinux
•added 2017/03/21 6:21 a.m.•93 views

CVE-2017-7207

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

5.5CVSS6.2AI score0.02386EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2017/03/21 12:00 a.m.•11 views

UBUNTU-CVE-2017-7207

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

5.5CVSS6.3AI score0.02386EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/03/21 12:00 a.m.•4 views

PT-2017-17576

Name of the Vulnerable Software and Affected Versions Artifex Software, Inc. Ghostscript version 9.20 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by utilizing a crafted PostScript document. This is related to the mem get bit...

7.8CVSS0.02386EPSS
SaveExploits0References104
UbuntuCve
UbuntuCve
•added 2017/03/21 12:00 a.m.•36 views

CVE-2017-7207

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

5.5CVSS6.4AI score0.02386EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/21 12:00 a.m.•7 views

CVE-2017-7207: NULL Pointer Dereference

The memgetbitsrectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted PostScript document...

5.5CVSS7.3AI score0.02386EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2017/03/07 3:59 p.m.•14 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS5.6AI score0.01957EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2017/03/07 3:59 p.m.•18 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS6.8AI score0.01957EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2017/03/07 3:59 p.m.•15 views

DEBIAN-CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS7.1AI score0.01957EPSS
SaveExploits0References1
Prion
Prion
•added 2017/03/07 3:59 p.m.•29 views

Design/Logic Flaw

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

4.3CVSS6.7AI score0.01957EPSS
SaveExploits0References9Affected Software2
NVD
NVD
•added 2017/03/07 3:59 p.m.•29 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS6.9AI score0.01957EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2017/03/07 3:00 p.m.•35 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

6.9AI score0.01957EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2017/03/07 3:00 p.m.•68 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS7.3AI score0.01957EPSS
SaveExploits0
CVE
CVE
•added 2017/03/07 3:00 p.m.•135 views

CVE-2013-5653

CVE-2013-5653 affects Ghostscript and stems from the getenv and filenameforall functions not honoring -dSAFER, enabling an attacker to read environment variables or list directories via a crafted PostScript document. The issue is documented across multiple sources (e.g., NVD description and IBM P...

5.5CVSS6.7AI score0.01957EPSS
SaveExploits0References9Affected Software1
Mend
Mend
•added 2017/03/07 3:00 p.m.•11 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

6.8CVSS0.01957EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/07 12:00 a.m.•8 views

CVE-2013-5653: Exposure of Sensitive Information to an Unauthorized Actor

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS7.5AI score0.01957EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/03/07 12:00 a.m.•9 views

Multiple Information Disclosure Vulnerabilities in Ghostscript

Ghostscript is a program for displaying PostScript files or printing them to non-PostScript printers. Ghostscript has multiple information disclosure vulnerabilities. An attacker could exploit this vulnerability to obtain sensitive information...

5.5CVSS6.4AI score0.01957EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2017/02/28 9:21 a.m.•45 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS6.6AI score0.01809EPSS
SaveExploits0References1
Rows per page
Query Builder