Lucene search
+L

2834 matches found

Debian
Debian
added 2017/04/28 11:51 a.m.125 views

[SECURITY] [DSA 3838-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3838-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2017 https://www.debian.org/security/faq -...

6.8CVSS2AI score0.9614EPSS
SaveExploits10
CNVD
CNVD
added 2017/04/28 12:0 a.m.5 views

Artifex Ghostscript Remote Command Execution Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. Artifex Ghostscrip...

7.8CVSS7.3AI score0.9614EPSS
SaveExploits7References1
OpenVAS
OpenVAS
added 2017/04/27 12:0 a.m.31 views

Debian: Security Advisory (DSA-3838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.9614EPSS
SaveExploits10References5
OSV
OSV
added 2017/04/26 12:0 a.m.14 views

UBUNTU-CVE-2017-8291

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile %pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017...

7.8CVSS7.1AI score0.9614EPSS
SaveExploits7References7
CNVD
CNVD
added 2017/04/26 12:0 a.m.7 views

Artifex Ghostscript mark_curve Denial of Service Vulnerability

Ghostscript is a set of software based on Adobe Systems PostScript and Portable Document Format PDF page description language interpreter. The markcurve function in Artifex Ghostscript suffers from an integer overflow problem that allows a remote attacker to cause a denial of service out-of-bound...

7.8CVSS7.1AI score0.0162EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2017/04/24 3:18 p.m.32 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS6.7AI score0.0162EPSS
SaveExploits1References1
OSV
OSV
added 2017/04/19 2:59 p.m.25 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.8AI score
SaveExploits0References3
OSV
OSV
added 2017/04/19 2:59 p.m.4 views

DEBIAN-CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.8AI score0.0162EPSS
SaveExploits1References1
Prion
Prion
added 2017/04/19 2:59 p.m.32 views

Integer overflow

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

6.8CVSS8.1AI score0.0162EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2017/04/19 2:59 p.m.30 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.2AI score0.0162EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2017/04/19 2:0 p.m.36 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.4AI score0.0162EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2017/04/19 2:0 p.m.49 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS8.2AI score0.0162EPSS
SaveExploits1
Fedora
Fedora
added 2017/04/19 7:53 a.m.34 views

[SECURITY] Fedora 24 Update: ghostscript-9.20-7.fc24

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

5.5CVSS1.5AI score0.02274EPSS
SaveExploits0
OSV
OSV
added 2017/04/14 6:59 p.m.3 views

DEBIAN-CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

7.8CVSS8AI score0.03212EPSS
SaveExploits0References1
Prion
Prion
added 2017/04/14 6:59 p.m.20 views

Design/Logic Flaw

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

6.8CVSS8.3AI score0.03212EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
added 2017/04/14 6:0 p.m.43 views

CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

7.8CVSS9.2AI score0.03212EPSS
SaveExploits0
CVE
CVE
added 2017/04/14 6:0 p.m.100 views

CVE-2016-8602

The CVE-2016-8602 issue affects Ghostscript before 9.21, where the .sethalftone5 function (psi/zht2.c) can be triggered by a crafted PostScript document with an empty operand stack. This could lead to a denial of service (application crash) and, in the worst case, arbitrary code execution. Affect...

7.8CVSS8.9AI score0.03212EPSS
SaveExploits0References11Affected Software1
RedhatCVE
RedhatCVE
added 2017/04/12 9:19 a.m.33 views

CVE-2016-10317

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS6.6AI score0.02282EPSS
SaveExploits1References1
Fedora
Fedora
added 2017/04/11 1:49 p.m.51 views

[SECURITY] Fedora 26 Update: ghostscript-9.20-8.fc26

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

5.5CVSS1.5AI score0.02274EPSS
SaveExploits0
Fedora
Fedora
added 2017/04/09 9:53 p.m.33 views

[SECURITY] Fedora 25 Update: ghostscript-9.20-7.fc25

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

5.5CVSS1.5AI score0.02274EPSS
SaveExploits0
Rows per page
Query Builder