6422 matches found
Ghostscript多个输入验证和整数溢出漏洞
BUGTRAQ ID: 34184 CVECAN ID: CVE-2009-0583,CVE-2009-0584 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript的国际色彩联盟格式库（icclib）中存在多个可导致堆溢出的整数溢出，以及多个不充分输入验证错误。攻击者可以使用特制的ICC配置文件创建嵌入了图形的恶意PostScript或PDF文件，如果受害用户打开了该文件就会导致Ghostscript崩溃或执行任意代码。 Ghostscript Ghostscript 8.x Ghostscript...
CVE-2009-0583: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...
CVE-2009-0584: Undefined Security Weakness
icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code by usin...
Ubuntu Update for ghostscript, gs-gpl vulnerability USN-501-2
Ubuntu Update for Linux kernel vulnerabilities USN-501-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5012.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ghostscript, gs-gpl vulnerability USN-501-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Fedora 9 : ghostscript-8.63-2.fc9 (2009-2883)
Security update for integer overflows CVE-2009-0583 and upper bounds checks CVE-2009-0584 in the ICC profile handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and form...
[SECURITY] Fedora 10 Update: ghostscript-8.63-5.fc10
Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...
[SECURITY] Fedora 9 Update: ghostscript-8.63-2.fc9
Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...
[SECURITY] [DSA 1746-1] New ghostscript packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1746-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...
RHEL 3 / 4 / 5 : ghostscript (RHSA-2009:0345)
Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...
RedHat Security Advisory RHSA-2009:0345
The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
DSA-1746-1 ghostscript gs-gpl - arbitrary code execution
Bulletin has no description...
ghostscript integer overflow
Integer overflows in ICC library...
RedHat Security Advisory RHSA-2009:0345
The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...
rPSA-2009-0050-1 ghostscript
rPath Security Advisory: 2009-0050-1 Published: 2009-03-19 Products: rPath Linux 2 Rating: Minor Exposure Level Classification: Indirect Deterministic Vulnerability Updated Versions: ghostscript=conary.rpath.com@rpl:devel/8.61-2.1-1 rPath Issue Tracking System:...
Debian DSA-1746-1 : ghostscript - several vulnerabilities
Two security issues have been discovered in ghostscript, the GPL Ghostscript PostScript/PDF interpreter. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0583 Jan Lieskovsky discovered multiple integer overflows in the ICC library, which allow the...
CentOS 3 / 4 : ghostscript (CESA-2009:0345)
Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...
ghostscript, hpijs security update
CentOS Errata and Security Advisory CESA-2009:0345 Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set o...
Moderate: Red Hat Security Advisory: ghostscript security update
Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ghostscript is a set of software that provides a PostScriptTM interpreter...
PT-2009-3227 · Artifex +2 · Ghostscript +2
Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.64 and earlier Argyll Color Management System CMS versions 1.0.3 and earlier Description: The issue is related to multiple integer overflows in the ICC Format library, which can be exploited by context-dependent attacke...
