Denial Of Service (DoS)

ghostscript is vulnerable to denial of service DoS. The vulnerability exists due to the heap-buffer-overflow in the lprnisblack function in contrib/lips4/gdevlprn.c, allowing an attacker to crash the application via a crafted PDF file...

Buffer Overflow

GhostScript is vulnerable to buffer overflow. This vulnerability exists due to a buffer overflow in pjcommonprintpage in devices/gdevpjet.c which allows an attacker to cause a denial of service via a maliciously crafted PDF file...

CVE-2020-16289

Artifex Software GhostScript is vulnerable to denial of service attacks. A remote attacker could cause buffer overflows in cifprintpage in devices/gdevcif.c via a crafted PDF file resulting in denial of service conditions...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in FAPI_FF_get_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6089449368453120 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: FAPIFFgetglyph getfapiglyphdata...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in obj_cvp

Detailed Report: https://oss-fuzz.com/testcase?key=5971725904510976 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: objcvp zwritecvpat zwritecvp...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in load_truetype_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5644843912790016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: loadtruetypeglyph TTLoadGlyph...

PT-2022-5146 · Moodle +3 · Moodle +3

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified GhostScript versions prior to 9.50 Description: The issue occurs due to improper input validation when parsing PostScript code, resulting in a remote code execution risk. An omitted execution parameter...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gstate_free_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5122696914141184 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000920 Crash State: gstatefreeconten...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2020-2344)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2020:4635 ghostscript bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2020-2344)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A buffer overflow vulnerability in lprnisblack in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker t...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2020-2309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : ghostscript (EulerOS-SA-2020-2309)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - This package provides useful conversion utilities based on Ghostscript software, for converting PS, PDF and other document formats between...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2020-2282)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2020-2282)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote...

CVE-2020-27605

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox."...

CVE-2020-27605

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox."...

Design/Logic Flaw

BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related to a "schwache Sandbox."...

CVE-2020-27605

Technical details about CVE-2020-27605 are not publicly available in the provided connected documents. Monitor for updates from official sources to assess affected components, impact, and remediation.