CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

Debian Security Advisory DSA 3691-1 (ghostscript - security update)

Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may lead to the execution of arbitrary code or information disclosure if a specially crafted Postscript file is processed. OpenVAS Vulnerability Test $Id: deb3691.nasl 6959 2017-08-18 07:24:59Z astei...

SUSE-SU-2016:2493-1 Security update for ghostscript-library

This update for ghostscript-library fixes the following issues: - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...

SUSE-SU-2016:2492-1 Security update for ghostscript-library

This update for ghostscript-library fixes the following issues: - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...

Debian: Security Advisory (DSA-3691-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-7977

It was found that ghostscript function .libfile did not honor the -dSAFER option, usually used when processing untrusted documents, leading to information disclosure. A specially crafted postscript document could, in the context of the gs process, retrieve file content on the target machine...

PT-2016-7454

Name of the Vulnerable Software and Affected Versions Ghostscript version 9.20 Description The issue is related to a use-after-free vulnerability that might allow remote attackers to execute arbitrary code. This is due to a reference leak in the .setdevice function. Recommendations For Ghostscrip...

CVE-2016-7978

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice...

PT-2016-7455

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.21 Description The issue allows remote attackers to bypass the SAFER mode protection mechanism, which could lead to the execution of arbitrary code. This is achieved by leveraging type confusion in the initializ...

UBUNTU-CVE-2016-7978

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice...

UBUNTU-CVE-2016-7979

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initializedscparser...

UBUNTU-CVE-2016-7977

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document...

PT-2016-7453

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.21 Description The issue allows remote attackers to bypass the SAFER mode protection mechanism, which could lead to reading arbitrary files. This can be achieved through the use of the .libfile operator in a...

CVE-2016-7977

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document...

CVE-2016-7979

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initializedscparser...

UBUNTU-CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

PT-2016-7452

Name of the Vulnerable Software and Affected Versions Ghostscript versions 9.18 through 9.20 Description The issue allows remote attackers to execute arbitrary code via crafted userparams. Recommendations For Ghostscript versions 9.18 through 9.20, update to a version that contains a fix for this...

CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams...

PT-2016-3286

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.21rc1 Description The issue is related to the zfile.c library in the PostScript/PDF interpreter Ghostscript, which is connected to the status command. Even when the dSAFER sandbox is used, the...

Debian DLA-484-1 : graphicsmagick security update (ImageTragick)

Several security vulnerabilities were discovered in graphicsmagick a tool to manipulate image files. GraphicsMagick is a fork of ImageMagick and also affected by vulnerabilities collectively known as ImageTragick, that are the consequence of lack of sanitization of untrusted input. An attacker wi...