Lucene search
+L

2835 matches found

OSV
OSV
added 2020/07/28 4:15 p.m.2 views

ALPINE-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS6.9AI score0.05186EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/28 4:15 p.m.2 views

DEBIAN-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS8.5AI score0.05186EPSS
SaveExploits0References1
Prion
Prion
added 2020/07/28 4:15 p.m.25 views

Memory corruption

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

7.5CVSS9.4AI score0.05186EPSS
SaveExploits0References9Affected Software3
UbuntuCve
UbuntuCve
added 2020/07/28 4:15 p.m.36 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS7.1AI score0.05186EPSS
SaveExploits0References3
OSV
OSV
added 2020/07/28 4:15 p.m.5 views

UBUNTU-CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS7.2AI score0.05186EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2020/07/28 3:17 p.m.41 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.5AI score0.05186EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2020/07/28 3:17 p.m.71 views

CVE-2020-15900

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t. This was fixed...

9.8CVSS9.6AI score0.05186EPSS
SaveExploits0
FreeBSD
FreeBSD
added 2020/07/28 12:0 a.m.26 views

Ghostscript -- SAFER Sandbox Breakout

NVD reports: A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32t...

9.8CVSS9.3AI score0.05186EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/17 12:0 a.m.33 views

EulerOS 2.0 SP2 : ghostscript (EulerOS-SA-2020-1658)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in, ghostscript versions prior to 9.50, in the .pdfhookDSCCreator procedure where it did not properly secure its privilege...

9.8CVSS7.8AI score0.11397EPSS
SaveExploits2References5
Zero Day Initiative
Zero Day Initiative
added 2020/05/25 12:0 a.m.32 views

Adobe Character Animator EPS BoundingBox Element Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Character Animator. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

7.8CVSS4.8AI score0.07871EPSS
SaveExploits0References1
Fedora
Fedora
added 2020/05/21 3:8 a.m.27 views

[SECURITY] Fedora 30 Update: abcm2ps-8.14.7-2.fc30

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS2.1AI score0.03073EPSS
SaveExploits1
Fedora
Fedora
added 2020/05/21 2:53 a.m.32 views

[SECURITY] Fedora 32 Update: abcm2ps-8.14.7-2.fc32

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS2.1AI score0.03073EPSS
SaveExploits1
Fedora
Fedora
added 2020/05/21 2:50 a.m.34 views

[SECURITY] Fedora 31 Update: abcm2ps-8.14.7-2.fc31

Abcm2ps is a package which converts music tunes from ABC format to Postscript. Based on abc2ps version 1.2.5, it was developed mainly to print Baroque organ scores which have independent voices played on one or many keyboards and a pedal-board. Abcm2ps introduces many extensions to the ABC langua...

9.8CVSS2.1AI score0.03073EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:0 a.m.18 views

The vulnerability of the Windows Adobe Type Manager Library on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Adobe Type Manager Library on Windows operating systems is related to the improper handling of a specially created Adobe Type 1 PostScript font. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.4AI score0.65037EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.21 views

The vulnerability of the Windows Adobe Type Manager library on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Adobe Type Manager library in Windows operating systems is related to the improper handling of the specially created multi-level font format—Adobe Type 1 PostScript. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially...

7.8CVSS8AI score0.69166EPSS
SaveExploits0References3
ArchLinux
ArchLinux
added 2020/05/06 12:0 a.m.30 views

[ASA-202005-4] a2ps: multiple issues

Arch Linux Security Advisory ASA-202005-4 ========================================= Severity: High Date : 2020-05-06 CVE-ID : CVE-2014-0466 CVE-2015-8107 Package : a2ps Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1150 Summary ======= The package a2ps before versio...

7.8CVSS8.2AI score0.0286EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2020/05/01 12:0 a.m.47 views

EulerOS Virtualization for ARM 64 3.0.2.0 : ghostscript (EulerOS-SA-2020-1549)

According to the versions of the ghostscript package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation...

7.8CVSS6.9AI score0.02295EPSS
SaveExploits1References4
Gentoo Linux
Gentoo Linux
added 2020/04/30 12:0 a.m.50 views

FontForge: Multiple vulnerabilities

Background FontForge is a PostScript font editor and converter. Description Multiple vulnerabilities have been discovered in FontForge. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted font using FontForge,...

9.8CVSS3.8AI score0.02653EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.6 views

The vulnerability of the built-in PDF converter in the Ghostscript software, which is used for processing, transforming, and generating documents, allows a hacker to trigger a system failure.

The vulnerability of the embedded PDF converter in the Ghostscript software for document processing, conversion, and generation is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially crafted PostScript...

7.8CVSS7.2AI score0.01561EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.7 views

The vulnerability of the `setdistillerkeys` command in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.

The vulnerability of the setdistillerkeys command in the software for processing, transforming, and generating Ghostscript documents is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure using a...

7.8CVSS6.8AI score0.01721EPSS
SaveExploits0References9Affected Software3
Rows per page
Query Builder