5493 matches found
Ghostscript < 8.64 - 'gdevpdtb.c' Local Buffer Overflow
Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with arbitrary data, potentially allowing...
SuSE Update for ghostscript SUSE-SA:2008:010
Check for the Version of ghostscript OpenVAS Vulnerability Test $Id: gbsuse2008010.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for ghostscript SUSE-SA:2008:010 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Gentoo Security Advisory GLSA 200410-18 (Ghostscript)
The remote host is missing updates announced in advisory GLSA 200410-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200803-14 (ghostscript)
The remote host is missing updates announced in advisory GLSA 200803-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200803-14 (ghostscript)
The remote host is missing updates announced in advisory GLSA 200803-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200410-18 (Ghostscript)
The remote host is missing updates announced in advisory GLSA 200410-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: ghostscript-gpl, ghostscript-gpl-nox11
The remote host is missing an update to the system as announced in the referenced advisory. VID ca8e56d5-e856-11dc-b5af-0017319806e7 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: ghostscript-gpl, ghostscript-gpl-nox11
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: ghostscript-gnu, ghostscript-gnu-nox11
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : ghostscript, gs-esp, gs-gpl vulnerability (USN-599-1)
Chris Evans discovered that Ghostscript contained a buffer overflow in its color space handling code. If a user or automated system were tricked into opening a crafted Postscript file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the...
USN-599-1: Ghostscript vulnerability
Chris Evans discovered that Ghostscript contained a buffer overflow in its color space handling code. If a user or automated system were tricked into opening a crafted Postscript file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the...
GLSA-200803-14 : Ghostscript: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200803-14 Ghostscript: Buffer overflow Chris Evans Google Security discovered a stack-based buffer overflow within the zseticcspace function in the file zicc.c when processing a PostScript file containing a long 'Range' array in a...
Ghostscript: Buffer overflow
Background Ghostscript is a suite of software based on an interpreter for PostScript and PDF. Description Chris Evans Google Security discovered a stack-based buffer overflow within the zseticcspace function in the file zicc.c when processing a PostScript file containing a long "Range" array in a...
Fedora 8 : ghostscript-8.61-8.fc8 (2008-1998)
This update contains a back-ported fix for a security issue that allows malicious PostScript input files to cause a stack-based buffer overflow CVE-2008-0411. This update also restores JPEG2000 support. Note that Tenable Network Security has extracted the preceding description block directly from...
Fedora 7 : ghostscript-8.15.4-4.fc7 (2008-2084)
This update contains a back-ported fix for a security issue that allows malicious PostScript input files to cause a stack-based buffer overflow CVE-2008-0411. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...
FreeBSD : ghostscript -- zseticcspace() function buffer overflow vulnerability (ca8e56d5-e856-11dc-b5af-0017319806e7)
Chris Evans from the Google Security Team reports : Severity: parsing of evil PostScript file will result in arbitrary code execution. A stack-based buffer overflow in the zseticcspace function in zicc.c allows remote arbitrary code execution via a malicious PostScript file .ps that contains a lo...
[SECURITY] Fedora 7 Update: ghostscript-8.15.4-4.fc7
Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...
Slackware 11.0 / 12.0 / current : espgs/ghostscript (SSA:2008-062-01)
New espgs or ghostscript packages are available for 11.0, 12.0, and -current to fix a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-062-01. The text itself is...
[SECURITY] Fedora 8 Update: ghostscript-8.61-8.fc8
Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...
ghostscript-poc.txt
/ A proof of concept exploit for ghostscript 8.61 and earlier. Vulnerability discovered by Chris Evans Author: [email protected] Will Drewry Affects: All versions of ghostscript that support .seticcspace. Tested on: Ubuntu gs-esp-8.15.2.dfsg.0ubuntu1-0ubuntu1 x86 Ghostscript 8.61 2007-11-21 x86...