Lucene search
+L

5496 matches found

NVD
NVD
added 2018/04/18 9:29 p.m.20 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.9AI score0.01905EPSS
SaveExploits0References7
OSV
OSV
added 2018/04/18 9:29 p.m.6 views

ALPINE-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.5AI score0.01905EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/04/18 9:0 p.m.26 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.2AI score0.01905EPSS
SaveExploits0References7
CVE
CVE
added 2018/04/18 9:0 p.m.218 views

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

7.8CVSS7.2AI score0.01905EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2018/04/18 9:0 p.m.43 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.4AI score0.01905EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2018/04/18 9:0 p.m.35 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS8.3AI score0.01905EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/04/18 12:0 a.m.28 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.2AI score0.01905EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/18 12:0 a.m.13 views

UBUNTU-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.2AI score0.01905EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.16 views

Solaris 10 (sparc) : 122259-09

SunOS 5.10: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Dec/15/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

7AI score
SaveExploits0References1
Mageia
Mageia
added 2018/02/25 5:31 p.m.43 views

Updated ghostscript packages fix security vulnerability

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document CVE-2016-10317...

7.8CVSS6AI score0.02282EPSS
SaveExploits1References2
OSV
OSV
added 2018/02/25 5:31 p.m.7 views

MGASA-2018-0142 Updated ghostscript packages fix security vulnerability

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document CVE-2016-10317...

7.8CVSS7.8AI score0.02282EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/02/24 12:0 a.m.11 views

Artifex Software Ghostscript 'pdf14_pop_transparency_group' Function Denial of Service Vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. Artifex Software Ghostscript 9.20 version of the PDF Transparency module of the base/gdevp14.c file 'pdf14poptransparencygroup'...

5.5CVSS6.9AI score0.01273EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/24 12:0 a.m.14 views

Artifex Software Ghostscript 'intersect' function denial of service vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. A security vulnerability exists in the 'intersect' function of the base/gxfill.c file in Artifex Software Ghostscript version 9.20. A...

5.5CVSS6.8AI score0.01863EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/24 12:0 a.m.7 views

Artifex Software Ghostscript 'gs_makewordimagedevice' Function Denial of Service Vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. A security vulnerability exists in the 'gsmakewordimagedevice' function in the base/gsdevmem.c file in Artifex Software Ghostscript...

5.5CVSS6.8AI score0.01863EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/02/24 12:0 a.m.8 views

Artifex Software Ghostscript 'pdf14_open' Function Denial of Service Vulnerability

Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. A security vulnerability exists in the 'pdf14open' function in the base/gdevp14.c file in Artifex Software Ghostscript version 9.20. ...

5.5CVSS6.9AI score0.01459EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2018/02/21 12:0 a.m.8 views

PT-2018-1532 · Artifex +5 · Ghostscript +5

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 9.24 Description: The issue is related to a type confusion error in the LockDistillerParams parameter. Attackers who can provide manipulated PostScript files could exploit this to crash the interpreter or...

10CVSS6.8AI score0.9614EPSS
SaveExploits35References216
Tenable Nessus
Tenable Nessus
added 2018/02/12 12:0 a.m.38 views

openSUSE Security Update : ghostscript (openSUSE-2018-157)

This update for ghostscript fixes several security issues : - CVE-2017-9835: The gsallocrefarray function allowed remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document bsc1050879. ...

7.8CVSS6.9AI score0.03452EPSS
SaveExploits7References18
Tenable Nessus
Tenable Nessus
added 2018/02/12 12:0 a.m.34 views

SUSE SLED12 / SLES12 Security Update : ghostscript (SUSE-SU-2018:0407-1)

This update for ghostscript fixes several issues. These security issues were fixed : - CVE-2017-9835: The gsallocrefarray function allowed remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted...

7.8CVSS6.9AI score0.03452EPSS
SaveExploits7References28
OSV
OSV
added 2018/02/09 10:31 a.m.17 views

SUSE-SU-2018:0407-1 Security update for ghostscript

This update for ghostscript fixes several issues. These security issues were fixed: - CVE-2017-9835: The gsallocrefarray function allowed remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScri...

7.8CVSS7.6AI score0.03452EPSS
SaveExploits7References19
OpenVAS
OpenVAS
added 2018/02/06 12:0 a.m.31 views

Debian: Security Advisory (DLA-1048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.1AI score0.0275EPSS
SaveExploits5References3
Rows per page
Query Builder