Lucene search
+L

3370 matches found

osv_debian
osv_debian
•added 2020/07/28 4:15 p.m.•5 views

DEBIAN-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS8.5AI score0.05186EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2020/07/28 4:15 p.m.•17 views

UBUNTU-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS7.2AI score0.05186EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/07/28 4:15 p.m.•41 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS7.1AI score0.05186EPSS
SaveExploits0References3
Prion
Prion
•added 2020/07/28 4:15 p.m.•35 views

Memory corruption

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

7.5CVSS9.4AI score0.05186EPSS
SaveExploits0References9Affected Software3
Mend
Mend
•added 2020/07/28 3:17 p.m.•5 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS0.05186EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2020/07/28 3:17 p.m.•72 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.5AI score0.05186EPSS
SaveExploits0References9
Debian CVE
Debian CVE
•added 2020/07/28 3:17 p.m.•93 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS9.6AI score0.05186EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2020/07/28 12:00 a.m.•33 views

Ghostscript -- SAFER Sandbox Breakout

NVD reports: A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t...

9.8CVSS9.3AI score0.05186EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/06/17 12:00 a.m.•38 views

EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2020-1658)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privilege...

9.8CVSS7.8AI score0.10963EPSS
SaveExploits2References5
Zero Day Initiative
Zero Day Initiative
•added 2020/05/25 12:00 a.m.•39 views

Adobe Character Animator EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS4.8AI score0.07568EPSS
SaveExploits0References1
Fedora
Fedora
•added 2020/05/21 3:08 a.m.•29 views

[SECURITY] Fedora 30 Update: abcm2ps-8.14.7-2.fc30

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS8.1AI score0.03053EPSS
SaveExploits1
Fedora
Fedora
•added 2020/05/21 2:53 a.m.•41 views

[SECURITY] Fedora 32 Update: abcm2ps-8.14.7-2.fc32

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS8.1AI score0.03053EPSS
SaveExploits1
Fedora
Fedora
•added 2020/05/21 2:50 a.m.•44 views

[SECURITY] Fedora 31 Update: abcm2ps-8.14.7-2.fc31

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS8.1AI score0.03053EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2020/05/21 12:00 a.m.•34 views

Windows Adobe Type Manager Library Code Execution

The vulnerability of the Windows Adobe Type Manager Library on Windows operating systems is related to the improper handling of a specially created Adobe Type 1 PostScript font. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.65037EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•34 views

Windows Adobe Type Manager Code Execution

The vulnerability of the Windows Adobe Type Manager library in Windows operating systems is related to the improper handling of the specially created multi-level font format—Adobe Type 1 PostScript. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially...

7.8CVSS8AI score0.6895EPSS
SaveExploits0References3
ArchLinux
ArchLinux
•added 2020/05/06 12:00 a.m.•49 views

[ASA-202005-4] a2ps: multiple issues

Arch Linux Security Advisory ASA-202005-4 ========================================= Severity: High Date : 2020-05-06 CVE-ID : CVE-2014-0466 CVE-2015-8107 Package : a2ps Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1150 Summary ======= The package a2ps before versio...

7.8CVSS8.2AI score0.02765EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2020/05/01 12:00 a.m.•58 views

EulerOS Virtualization for ARM 64 3.0.2.0 : ghostscript (EulerOS-SA-2020-1549)

According to the versions of the ghostscript package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation...

7.8CVSS6.9AI score0.02295EPSS
SaveExploits1References4
Gentoo Linux
Gentoo Linux
•added 2020/04/30 12:00 a.m.•66 views

FontForge: Multiple vulnerabilities

Background FontForge is a PostScript font editor and converter. Description Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted font using FontForge,...

9.8CVSS3.8AI score0.02653EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•16 views

Ghostscript .tempfile Component Bypass dSAFER Protection File Deletion Unauthorized Access

The vulnerability of the .tempfile component in the software for processing, transforming, and generating Ghostscript documents is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass the dSAFER protection, delete files, or gain unauthorized...

7.8CVSS7.2AI score0.01916EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/29 12:00 a.m.•15 views

Ghostscript setdistillerkeys DoS

The vulnerability of the setdistillerkeys command in the software for processing, transforming, and generating Ghostscript documents is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure using a...

7.8CVSS6.8AI score0.01721EPSS
SaveExploits0References9Affected Software3
Rows per page
Query Builder