3364 matches found
CVE-2017-0261
CVE-2017-0261 and Exploit Sample Analysis 0x01 Vulnerability Description Cause: When opening an Office document, FLTLDR.EXE is used to render an embedded EPS file containing the vulnerability. The file is written in PostScript language and can be exploited by an attacker through a "save-restore"...
PIL-RCE-Ghostscript-CVE-2018-16509
Python PIL/Pillow Remote Shell Command Execution via Ghostscript CVE-2018-16509 Inspired by https://github.com/ysrc/PIL-RCE-By-GhostButt PIL/Pillow RCE via CVE-2017-8291. This docker environment version is using the newer version of Ghostscript v9.23 and newer exploit CVE-2018-16509. Ghostscript ...
ghostscript-CVE-2023-43115
ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...
PRET
PRET - Printer Exploitation Toolkit Is your printer secure? Check before someone else does... PRET is a new tool for printer security testing developed in the scope of a Master's Thesis at Ruhr University Bochum. It connects to a device via network or USB and exploits the features of a given...
USN-8949-1 ghostscript vulnerabilities
Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execu...
Linux Distros Unpatched Vulnerability : CVE-2026-109275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers ca...
Linux Distros Unpatched Vulnerability : CVE-2026-109273
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one by...
CVE-2026-112899
When an application opens an untrusted Encapsulated PostScript file and asks Pillow to render it at a larger scale, Pillow has Ghostscript produce an image several times bigger than Pillow's configured size limit allows. The size check runs only after Ghostscript has finished rendering and writte...
CVE-2018-16509
CVE-2018-16509 Docker Playground "An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction."...
Linux Distros Unpatched Vulnerability : CVE-2026-112177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to...
Debian dsa-6550 : ghostscript - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6550 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6550-1 [email protected] https://www.debian.org/securit...
CVE-2019-14811-in-pdf-exploit
CVE-2019-14811 GhostScript PDF preview Exploit PoC This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images. Exploit renders commands directly in pngXXm preview, it is based on...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...
PostScript Printer Driver Code Execution
The vulnerability of the PostScript Printer Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-70153
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-70147
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-70110
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally...
CVE-2026-70109
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally...