ghostscript memory corruption

Memory corruption on Postscript file parsing...

[SECURITY] [DSA 3326-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3326-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3326-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3326-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 02, 2015 https://www.debian.org/security/faq -...

DSA-3326-1 ghostscript - security update

Bulletin has no description...

Debian Security Advisory DSA 3326-1 (ghostscript - security update)

William Robinet and Stefan Cornelius discovered an integer overflow in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or potentially execution of arbitrary code if a specially crafted file is opened. OpenVAS Vulnerability Test $Id: deb3326.nasl 6609...

Debian: Security Advisory (DSA-3326-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2697-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Ghostscript vulnerability (USN-2697-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2697-1 advisory. William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked int...

USN-2697-1 ghostscript vulnerability

William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code...

USN-2697-1: Ghostscript vulnerability

William Robinet and Stefan Cornelius discovered that Ghostscript did not correctly handle certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code...

Artifex Software Ghostscript's/base/gsmalloc.c' Remote Integer Overflow Vulnerability

PostScript PS is a page description language and programming language used in the electronics industry and desktop publishing.Artifex Software Ghostscript is an open-source PostScript parser from Artifex Software that displays Postscript files and prints Postscript files on non-PostScript printer...

Debian DLA-280-1 : ghostscript security update

In gsheapallocbytes, add a sanity check to ensure we don't overflow the variable holding the actual number of bytes we allocate. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and...

[SECURITY] [DLA 280-1] ghostscript security update

Package : ghostscript Version : 8.71dfsg2-9+squeeze2 CVE ID : CVE-2015-3228 Debian Bug : 793489 In gsheapallocbytes, add a sanity check to ensure we dont overflow the variable holding the actual number of bytes we allocate...

DLA-280-1 ghostscript - security update

Bulletin has no description...

CVE-2015-3228

Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service crash via a crafted Postscript ps file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write...

UBUNTU-CVE-2015-3228

Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service crash via a crafted Postscript ps file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write...

ghostscript -- denial of service (crash) via crafted Postscript files

MITRE reports: Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service crash via a crafted Postscript ps file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or wri...

Ubuntu: Security Advisory (USN-2483-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS : ghostscript vulnerabilities (USN-2483-2)

USN-2483-1 fixed vulnerabilities in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Jose Duart discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked into opening a specially...

USN-2483-2: Ghostscript vulnerabilities

USN-2483-1 fixed vulnerabilities in JasPer. This update provides the corresponding fix for the JasPer library embedded in the Ghostscript package. Original advisory details: Jose Duart discovered that JasPer incorrectly handled ICC color profiles in JPEG-2000 image files. If a user were tricked...