The vulnerability of the Ghostscript software for document processing lies in the fact that operations are performed outside the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Artifex Ghostscript 9.55 DoS

The version of Artifex Ghostscript installed on the remote Windows host is 9.55. It is, therefore, affected by a NULL pointer dereference vulnerabiulity leading to denial of service. The DoS occurs when Ghostscript tries to render a large number of bits in memory. When allocating a buffer device,...

Ubuntu 16.04 ESM : Ghostscript vulnerability (USN-5618-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5618-1 advisory. It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an...

Ubuntu: Security Advisory (USN-5618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5123070645370880 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHW...

USN-5618-1: Ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

USN-5618-1 ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer over write vulnerability was found in GhostScript's lp8000printpage function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that...

Artifex Ghostscript Remote Code Execution (CVE-2018-16509)

A remote code execution vulnerability exists in Artifex Ghostscript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ghostscript:gs_device_pdfwrite_fuzzer: Segv on unknown address in deflate

Detailed Report: https://oss-fuzz.com/testcase?key=6444829516627968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: deflate szlibEprocess...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=6480202129080320 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHB...

PT-2022-37275 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include a crash state involving functions such as gs type2 interpret, copie...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=4704787672727552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fff31529760 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in Ins_ISECT

Detailed Report: https://oss-fuzz.com/testcase?key=5984645832900608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000071468 Crash State: InsISECT RunIns...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type1_piece_codes

Detailed Report: https://oss-fuzz.com/testcase?key=6048427783356416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fff06cf82dc Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in names_index_ref

Detailed Report: https://oss-fuzz.com/testcase?key=4880033168097280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f004020468 Crash State: namesindexref...

Debian dla-3096 : ghostscript - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3096 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3096-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3096-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3096-1] ghostscript security update

Debian LTS Advisory DLA-3096-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 04, 2022 https://wiki.debian.org/LTS Package : ghostscript Version : 9.27dfsg-2+deb10u6 CVE ID : CVE-2020-27792 A heap-based buffer over write vulnerability was found in...