6428 matches found
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
CVE-2023-36664 affects Artifex Ghostscript up to version 10.01.2. The issue is a mishandling of permission validation for pipe devices (prefixes %pipe% or the | character), which could allow arbitrary command execution when processing crafted documents. Public advisories confirm the vulnerability...
CVE-2023-36664: Files or Directories Accessible to External Parties
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
Artifex Software Ghostscript 安全漏洞
Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...
CVE-2023-36664
Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...
PT-2023-3318
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 10.01.2 and earlier Description The issue arises from mishandled permission validation for pipe devices, specifically those with the %pipe% prefix or the | pipe character prefix. This can lead to command injection,...
ghostscript:gstoraster_pdf_fuzzer: Heap-buffer-overflow in uofs
Detailed Report: https://oss-fuzz.com/testcase?key=4897049582370816 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpdffuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d000058458 Crash State: uofs...
Artifex Ghostscript < 10.01.1 Buffer Overflow
The version of Artifex Ghostscript installed on the remote Windows host is prior to 10.01.1. It is, therefore, affected by a buffer overflow that can lead to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and...
PT-2023-35864 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as psi device ref finalize, gs gc reclaim, and...
EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2023-2144)
According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2144)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ghostscript:gstoraster_ps_fuzzer: Heap-use-after-free in psi_device_ref_finalize
Detailed Report: https://oss-fuzz.com/testcase?key=4965215155126272 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c0000010f0 Crash State:...
ghostscript:gs_device_ps2write_fuzzer: Segv on unknown address in gs_gc_reclaim
Detailed Report: https://oss-fuzz.com/testcase?key=5662216398176256 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsgcreclaim ireclaim...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1820)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1802)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-1802)
According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...
Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1705)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...