CVE-2020-16288: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in pjcommonprintpage in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16297: Out-of-bounds Write

A buffer overflow vulnerability in FloydSteinbergDitheringC in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16304: Out-of-bounds Write

A buffer overflow vulnerability in imagerendercolorthresh in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges via a crafted eps file. This is fixed in v9.51...

CVE-2020-16301: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in okiibmprintpage1 in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16302: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in jetp3852printpage in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16307: NULL Pointer Dereference

A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. This is fixed in v9.51...

PT-2020-5548 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Artifex Software GhostScript versions 9.50 Description: A buffer overflow issue in the mj raster cmd function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For Artifex Software GhostScript...

PT-2020-5557 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A buffer overflow issue in the cif print page function allows a remote attacker to cause a denial of service via a crafted PDF file. The issue is related to a buffer overflow in memory...

PT-2020-5566 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Ghostscript versions prior to 9.51 Description: The issue is related to a buffer overflow in the jetp3852 print page function, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via a crafted PDF...

PT-2020-5554 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions 9.50 Description: A buffer overflow issue in the epsc print page function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For GhostScript version 9.50, update to version 9.51...

PT-2020-5547 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Ghostscript versions prior to 9.51 Description: The issue is related to a null pointer dereference vulnerability in the clj media size function, located in devices/gdevclj.c, which can be exploited by a remote attacker to cause a denial of...

PT-2020-5553 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A buffer overflow issue in the tiff12 print page function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For versions prior to 9.51, update to...

PT-2020-5558 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Artifex Software GhostScript version 9.50 Description: A buffer overflow vulnerability in the mj color correct function in contrib/japanese/gdevmjc.c allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendation...

PT-2020-5544 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A null pointer dereference issue in the compose group nonknockout nonblend isolated allmask common function in base/gxblend.c allows a remote attacker to cause a denial of service via a crafted...

PT-2020-5542 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Ghostscript version 9.50 Description: The issue is related to a Division by Zero error in the bj10v print page function, located in contrib/japanese/gdev10v.c, which can be exploited by a remote attacker to cause a denial of service via a...

PT-2020-5563 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Artifex Software GhostScript versions 9.50 Description: The issue is related to a buffer overflow in the lprn is black function, located in contrib/lips4/gdevlprn.c, which can be exploited by a remote attacker to cause a denial of service. Th...

PT-2020-5568 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions 9.50 Description: A buffer overflow issue in the pj common print page function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For GhostScript version 9.50, update to version...

CVE-2020-16308: Out-of-bounds Write

A buffer overflow vulnerability in pprintimage in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16299: Divide By Zero

A Division by Zero vulnerability in bj10vprintpage in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...

CVE-2020-16296: Out-of-bounds Write

A buffer overflow vulnerability in GetNumWrongData in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51...