Lucene search
K

2801 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/02/18 12:0 a.m.30 views

Lexmark MC3224i PostScript Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. Crafted PostScript data can trigger a...

8.8CVSS3.6AI score0.03312EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/15 12:0 a.m.31 views

(Pwn2Own) Lexmark MC3224i PostScript Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. Crafted PostScript data can trigger a...

8.8CVSS3.4AI score0.03312EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/15 12:0 a.m.36 views

Adobe FrameMaker PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe FrameMaker. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

3.3CVSS2.1AI score0.02804EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.23 views

Mageia: Security Advisory (MGASA-2018-0142)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.02282EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2019-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.02295EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.16 views

Mageia: Security Advisory (MGASA-2017-0430)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.03452EPSS
Exploits7References4
OSV
OSV
added 2022/01/20 4:15 p.m.2 views

CVE-2021-44738

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter...

9.8CVSS5.7AI score0.03312EPSS
Exploits0References4
NVD
NVD
added 2022/01/20 4:15 p.m.17 views

CVE-2021-44738

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter...

10CVSS0.03312EPSS
Exploits0References4
Prion
Prion
added 2022/01/20 4:15 p.m.25 views

Buffer overflow

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter...

10CVSS9.6AI score0.03312EPSS
Exploits0References4Affected Software234
CVE
CVE
added 2022/01/20 3:59 p.m.79 views

CVE-2021-44738

CVE-2021-44738 is a buffer-overflow vulnerability in Lexmark devices’ PostScript interpreter. Multiple sources (ZDI advisories and NVD) describe a write past the end of a buffer during PostScript data handling, enabling potential remote code execution on affected Lexmark printers (e.g., MC3224i) ...

10CVSS9.5AI score0.03312EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2022/01/20 3:59 p.m.21 views

CVE-2021-44738

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter...

9.9AI score0.03312EPSS
Exploits0References4
Ubuntu
Ubuntu
added 2022/01/13 1:41 p.m.92 views

USN-5224-2: Ghostscript vulnerabilities

USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

5.5CVSS6.8AI score0.0172EPSS
Exploits2
OSV
OSV
added 2022/01/13 1:41 p.m.8 views

USN-5224-2 ghostscript vulnerabilities

USN-5224-1 fixed several vulnerabilities in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a...

5.5CVSS6.6AI score0.0172EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2022/01/13 6:39 a.m.47 views

CVE-2018-15908

It was discovered that the ghostscript .tempfile function did not properly handle file permissions. An attacker could possibly exploit this to exploit this to bypass the -dSAFER protection and delete files or disclose their content via a specially crafted PostScript document. Mitigation Please se...

7.8CVSS0.9AI score0.01916EPSS
Exploits0References2
NCSC
NCSC
added 2022/01/13 12:0 a.m.1 views

Vulnerabilities fixed in Ghostscript

Vulnerabilities have been fixed in Ghostscript. A malicious person could potentially exploit the vulnerability to cause a denial-of-service cause. To do this, a specially prepared PostScript file to be processed by the Ghostscript instance. Because Ghostscript is commonly used on print servers in...

5.5CVSS6.6AI score0.0172EPSS
Exploits2
Ubuntu
Ubuntu
added 2022/01/12 12:15 p.m.108 views

USN-5224-1: Ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execut...

5.5CVSS6.5AI score0.0172EPSS
Exploits2
OSV
OSV
added 2022/01/12 12:15 p.m.2 views

USN-5224-1 ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execut...

5.5CVSS6.5AI score0.0172EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2022/01/09 12:0 a.m.11 views

Debian: Security Advisory (DSA-5038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.8AI score0.0172EPSS
Exploits2References4
CNNVD
CNNVD
added 2022/01/01 12:0 a.m.3 views

Artifex Software Ghostscript 资源管理错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print them on non-Postscript printers. A...

5.5CVSS6.5AI score0.0172EPSS
Exploits1References18
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.2 views

The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing EPS/TIFF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02328EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder