5494 matches found
Fedora 24 : ghostscript (2016-53e8aa35f6)
This is a rebase of ghostscript package, to address several security issues : - CVE-2016-7977 - .libfile does not honor -dSAFER - CVE-2013-5653 - getenv and filenameforall ignore -dSAFER - CVE-2016-7976 - various userparams allow %pipe% in paths, allowing remote shell - CVE-2016-7978 - reference...
Fedora 23 : ghostscript (2016-1c13825502)
This is a rebase of ghostscript package, to address several security issues : - CVE-2016-7977 - .libfile does not honor -dSAFER - CVE-2013-5653 - getenv and filenameforall ignore -dSAFER - CVE-2016-7976 - various userparams allow %pipe% in paths, allowing remote shell - CVE-2016-7978 - reference...
[SECURITY] Fedora 24 Update: ghostscript-9.20-2.fc24
Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...
[SECURITY] Fedora 25 Update: ghostscript-9.20-2.fc25
Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...
Ghostscript Memory Corruption Vulnerability
Ghostscript is a set of Adobe-based, PostScript and portable document format PDF page description language and compiled into the free software. A memory corruption vulnerability exists in Ghostscript, which can be exploited to cause remote code execution...
Ghostscript Remote File Disclosure Vulnerability
Ghostscript is a set of Adobe-based, PostScript and portable document format PDF page description language and compiled into the free software. A remote file disclosure vulnerability exists in Ghostscript due to an unchecked PermitFileReading array, which can be exploited to cause remote file...
Ghostscript Remote Code Execution Vulnerability
Ghostscript is a set of Adobe-based, PostScript and portable document format PDF page description language and compiled into the free software. A remote code execution vulnerability exists in Ghostscript, which can be exploited by an attacker to execute arbitrary code...
Ghostscript Remote Command Execution Vulnerability
Ghostscript is a set of Adobe-based, PostScript and portable document format PDF page description language and compiled into the free software. A remote command execution vulnerability exists in Ghostscript that could allow a remote attacker to execute arbitrary code within the context of the...
CVE-2016-8602
It was found that ghostscript did not sufficiently check the validity of parameters given to the .sethalftone5 function. A specially crafted postscript document could cause a crash, or execute arbitrary code in the context of the gs process...
Debian DSA-3691-1 : ghostscript - security update
Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may lead to the execution of arbitrary code or information disclosure if a specially crafted Postscript file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...
[SECURITY] [DSA 3691-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3691-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3691-1] ghostscript security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3691-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 12, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3691-1 (ghostscript - security update)
Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may lead to the execution of arbitrary code or information disclosure if a specially crafted Postscript file is processed. OpenVAS Vulnerability Test $Id: deb3691.nasl 6959 2017-08-18 07:24:59Z astei...
UBUNTU-CVE-2016-8602
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...
SUSE SLED12 / SLES12 Security Update : ghostscript-library (SUSE-SU-2016:2492-1)
This update for ghostscript-library fixes the following issues : - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...
DSA-3691-1 ghostscript - security update
Bulletin has no description...
CVE-2016-8602
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...
SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2016:2493-1)
This update for ghostscript-library fixes the following issues : - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...
SUSE-SU-2016:2493-1 Security update for ghostscript-library
This update for ghostscript-library fixes the following issues: - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...
SUSE-SU-2016:2492-1 Security update for ghostscript-library
This update for ghostscript-library fixes the following issues: - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...