6428 matches found
Debian: Security Advisory (DSA-5446-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5446-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5446-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 03, 2023 https://www.debian.org/security/faq -...
DSA-5446-1 ghostscript - security update
Bulletin has no description...
PT-2023-35891 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Memcpy-param-overlap. The crash occurs in the following functions: pdfi copy truetype font, pdfi load font,...
PT-2023-35890 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the following functions: default get outline, pdfi fapi get glyph, and get fapi...
Artifex Ghostscript < 10.01.2 Security Bypass
An authentication bypass vulnerability exists in Artifex Ghostscript prior to 10.01.2 due to mishandling permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix An unauthenticated, remote attacker can exploit this, to bypass authentication. Note that Nessus ha...
ghostscript:gstoraster_pdf_fuzzer: Heap-buffer-overflow in default_get_outline
Detailed Report: https://oss-fuzz.com/testcase?key=4653827832545280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6310000ec924 Crash State:...
ghostscript:gs_device_eps2write_fuzzer: Memcpy-param-overlap in pdfi_copy_truetype_font
Detailed Report: https://oss-fuzz.com/testcase?key=5951139280191488 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62d000066d18,0x62d000069d18 and...
ghostscript:gs_device_eps2write_fuzzer: Memcpy-param-overlap in pdfi_copy_truetype_font
Detailed Report: https://oss-fuzz.com/testcase?key=5951139280191488 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceeps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x62d000066d18,0x62d000069d18 and...
The vulnerability of the software for processing, transforming, and generating documents using Ghostscript exists due to the lack of measures taken to eliminate the special elements used in the operating system command. This allows a perpetrator to execute arbitrary code.
The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists because measures are not taken to eliminate the special elements used in the operating system command. Exploiting this vulnerability allows an attacker to execute arbitrary code by using th...
CVE-2023-36664
A vulnerability was found in Ghostscript. This flaw occurs due to a mishandled permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
SUSE CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
ALPINE-CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
DEBIAN-CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
