CVE-2009-0196

CVE-2009-0196 describes a heap-based buffer overflow in Ghostscript’s JBIG2 decoding path. The vulnerability resides in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) within the JBIG2 decoding library (jbig2dec) and affects Ghostscript 8.64 and probably earlier versions. A specially c...

CVE-2009-0196

Heap-based buffer overflow in the big2decodesymboldict function jbig2symboldict.c in the JBIG2 decoding library jbig2dec in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run...

CVE-2009-0196: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the big2decodesymboldict function jbig2symboldict.c in the JBIG2 decoding library jbig2dec in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run...

Fedora 9 : ghostscript-8.63-3.fc9 (2009-3710)

This update fixes several security flaws: CVE-2009-0792 multiple integer overflows and missing upper-bounds checks in icclib, CVE-2009-0196 missing boundary check in jbig2dec library, and CVE-2008-6679 buffer overflow in pdfwrite device. Note that Tenable Network Security has extracted the...

CVE-2009-0196

Heap-based buffer overflow in the big2decodesymboldict function jbig2symboldict.c in the JBIG2 decoding library jbig2dec in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol dictionary segment with a large run...

[SECURITY] Fedora 9 Update: ghostscript-8.63-3.fc9

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

[SECURITY] Fedora 10 Update: ghostscript-8.63-6.fc10

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

USN-757-1: Ghostscript vulnerabilities

It was discovered that Ghostscript contained a buffer underflow in its CCITTFax decoding filter. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program...

RedHat Security Advisory RHSA-2009:0420

The remote host is missing updates announced in advisory RHSA-2009:0420. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

Fedora Core 10 FEDORA-2009-3435 (argyllcms)

The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3435. OpenVAS Vulnerability Test $Id: fcore20093435.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3435 argyllcms Authors: Thomas Reinke Copyright: Copyright c 200...

RedHat Security Advisory RHSA-2009:0420

The remote host is missing updates announced in advisory RHSA-2009:0420. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

RedHat Security Advisory RHSA-2009:0421

The remote host is missing updates announced in advisory RHSA-2009:0421. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

CentOS 3 / 4 : ghostscript (CESA-2009:0420)

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScript interpreter, a se...

Fedora Core 10 FEDORA-2009-3435 (argyllcms)

The remote host is missing an update to argyllcms announced via advisory FEDORA-2009-3435. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

RedHat Security Advisory RHSA-2009:0421

The remote host is missing updates announced in advisory RHSA-2009:0421. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

RHEL 4 : ghostscript (RHSA-2009:0420)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0420 advisory. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the...

RHEL 5 : ghostscript (RHSA-2009:0421)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0421 advisory. Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the...

ghostscript, hpijs security update

CentOS Errata and Security Advisory CESA-2009:0420 Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of...

Moderate: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScript interpreter, a set of C...

ghostscript: DoS (crash) in CCITTFax decoding filter

The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cfdecode2d function...