Lucene search
+L

6435 matches found

OSS-Fuzz
OSS-Fuzz
•added 2022/08/17 12:08 a.m.•20 views

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in gx_device_forward_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6094380158550016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State:...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/08/17 12:00 a.m.•46 views

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2022-2266)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

7.8CVSS7.5AI score0.01756EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/08/17 12:00 a.m.•39 views

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2022-2220)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

7.8CVSS7.5AI score0.01756EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2022/08/16 11:45 p.m.•20 views

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5504389359468544 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fcf758b641c Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/08/15 11:28 p.m.•8 views

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_glyph_data_from_string

Detailed Report: https://oss-fuzz.com/testcase?key=6152113700339712 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7ffcf5252b40 Crash State:...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/08/14 12:00 a.m.•6 views

PT-2022-37183 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving functions such as pdfi read cff dict and pdf...

6.8AI score
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2022/08/12 2:25 p.m.•16 views

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in pdfi_read_cff_dict

Detailed Report: https://oss-fuzz.com/testcase?key=5610170981416960 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d000076e10 Crash State:...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/08/11 12:00 a.m.•33 views

Fedora: Security Advisory for ghostscript (FEDORA-2022-d287230630)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.9AI score0.01417EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/08/10 1:28 a.m.•51 views

[SECURITY] Fedora 35 Update: ghostscript-9.56.1-1.fc35

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

5.5CVSS5.9AI score0.01417EPSS
SaveExploits1
OSS-Fuzz
OSS-Fuzz
•added 2022/08/07 5:44 a.m.•10 views

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=6176191119228928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62e00000c450 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/08/06 4:25 p.m.•7 views

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in pdfi_load_font

Detailed Report: https://oss-fuzz.com/testcase?key=4783989214281728 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6310000c4b18 Crash State: pdfiloadfont...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/08/05 9:36 a.m.•16 views

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gsicc_smask_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=6652212696186880 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x614000000dd8 Crash State: gsiccsmaskfinali...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/07/31 9:16 a.m.•12 views

ghostscript:gs_device_ps2write_fuzzer: Crash in pdfi_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5347646310580224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6310000a0858 Crash State: pdfifreeobject...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/07/30 9:38 p.m.•13 views

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in pdfi_load_font_buffer

Detailed Report: https://oss-fuzz.com/testcase?key=5103905893122048 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6310000f0850 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/07/29 3:31 p.m.•13 views

ghostscript:gs_device_pxlmono_fuzzer: Crash in pdfi_repair_file

Detailed Report: https://oss-fuzz.com/testcase?key=4942714512211968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlmonofuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x63100b5671d8 Crash State: pdfirepairfile...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/07/27 1:34 a.m.•32 views

ghostscript:gs_device_ps2write_fuzzer: Stack-use-after-return in rc_free_text_enum

Detailed Report: https://oss-fuzz.com/testcase?key=4600783475179520 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 8 Crash Address: 0x7efd9e76b2a0 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/07/26 10:49 p.m.•14 views

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in gs_tifsSeekProc

Detailed Report: https://oss-fuzz.com/testcase?key=5193300629389312 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x606000020150 Crash State:...

5.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2022/07/26 12:00 a.m.•36 views

Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS7.5AI score0.08554EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2022/07/26 12:00 a.m.•30 views

GHSA-XP2F-9MX3-3C6P Moodle PostScript Code Injection

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in...

9.8CVSS9.6AI score0.08554EPSS
SaveExploits1References7
Veracode
Veracode
•added 2022/07/25 10:01 p.m.•128 views

Remote Code Execution (RCE)

Moodle is vulnerable to Remote Code Execution. Due to an omitted execution parameter in the GhostScript command, an attacker is able to run code on the system by parsing PostScript code...

9.8CVSS9.2AI score0.08554EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder