5493 matches found
CVE-2009-0792
Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...
CVE-2009-0792
Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...
ghostscript security update
7.07-33.2:.8 - Added extra checking for CVE-2009-0792 bug 491853. 7.07-33.2:.7 - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853...
PT-2009-1049 · International Color Consortium +4 · International Color Consortium (Icc) Format Library +4
Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.64 and earlier Argyll Color Management System CMS versions 1.0.3 and earlier hpijs package version 1.3 in Red Hat Enterprise Linux Description: The issue is related to multiple integer overflows in the International Col...
CVE-2009-0792
Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...
ghostscript security update
8.15.2-9.4:.7 - Added extra checking for CVE-2009-0792 bug 491853. 8.15.2-9.4:.6 - Applied patch to fix gdevpdtb buffer overflow bug 493445. - Applied patch to fix scfd buffer underrun bug 493442. - Applied patch to fix CVE-2009-0792 bug 491853. - Applied patch to fix CVE-2009-0196 bug 493379...
Ghostscript jbig2dec库JBIG2处理堆溢出漏洞
BUGTRAQ ID: 34445 CVECAN ID: CVE-2009-0196 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript所捆绑的jbig2dec库在解码JBIG2符号字典段时存在堆溢出漏洞。如果用户受骗打开了特制的PDF文件的话就可以触发这个溢出，导致Ghostscript崩溃或执行任意代码。 Ghostscript 8.64 Ghostscript ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Secunia Research: Ghostscript jbig2dec JBIG2 Processing Buffer Overflow
====================================================================== Secunia Research 09/04/2009 - Ghostscript jbig2dec JBIG2 Processing Buffer Overflow - ====================================================================== Table of Contents Affected...
Fedora 9 : argyllcms-1.0.3-4.fc9 (2009-3430)
Multiple integer overflows and multiple insufficient upper-bounds checks on certain variable sizes were originally discovered in the Ghostscript's International Color Consortium Format Library icclib. It was found, the original patch, addressing this issue was incomplete. Note that Tenable Networ...
Mandriva Update for ghostscript MDVSA-2008:055 (ghostscript)
Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2008:055 ghostscript Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for ghostscript MDKSA-2007:208 (ghostscript)
Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDKSA-2007:208 ghostscript Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for ghostscript MDKSA-2007:208 (ghostscript)
Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDKSA-2007:208 ghostscript Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Mandriva Update for ghostscript MDVSA-2008:055 (ghostscript)
Check for the Version of ghostscript OpenVAS Vulnerability Test Mandriva Update for ghostscript MDVSA-2008:055 ghostscript Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Buffer overflow
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...
CVE-2007-6725
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...
Buffer overflow
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...
CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...
CVE-2007-6725
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...
DEBIAN-CVE-2007-6725
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...
CVE-2008-6679
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service ps2pdf crash and possibly execute arbitrary code via a crafted Postscript file...