Lucene search
K

2801 matches found

OSV
OSV
added 2025/05/01 11:45 a.m.2 views

USN-7473-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation...

4.5CVSS5.8AI score0.00155EPSS
Exploits0References2
Fedora
Fedora
added 2025/04/10 2:46 a.m.12 views

[SECURITY] Fedora 40 Update: ghostscript-10.02.1-14.fc40

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

9.8CVSS7.3AI score0.00775EPSS
Exploits0
Fedora
Fedora
added 2025/04/05 1:27 a.m.13 views

[SECURITY] Fedora 41 Update: ghostscript-10.03.1-5.fc41

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

9.8CVSS7AI score0.00775EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/03/22 2:13 p.m.2 views

SUSE CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS7.3AI score0.0014EPSS
Exploits0References3
NVD
NVD
added 2025/03/20 9:15 p.m.6 views

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS0.0014EPSS
Exploits0References1
OSV
OSV
added 2025/03/20 9:15 p.m.1 views

UBUNTU-CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS5.8AI score0.0014EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/20 9:7 p.m.13 views

CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS0.0014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/20 9:7 p.m.8 views

CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS6.8AI score0.0014EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/03/20 9:7 p.m.1 views

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS7.5AI score0.0014EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/03/20 9:7 p.m.5 views

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS4.6AI score0.0014EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/03/20 12:0 a.m.3 views

PT-2025-12377

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue is related to an out-of-bounds array write due to incorrect integer overflow checking in the PostScript function interpreter code. Recommendations For versions 4.05 and earlier, update to a...

8.2CVSS6.9AI score0.00391EPSS
Exploits2References26
CNNVD
CNNVD
added 2025/03/20 12:0 a.m.1 views

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf 4.05 and earlier versions, which stems from an integer overflow checking error in the PostScript function interpreter code,...

2.1CVSS4.6AI score0.0014EPSS
Exploits0References1
OSV
OSV
added 2025/03/10 7:40 p.m.2 views

CLSA-2025-1741635651 cups: Fix of CVE-2024-47175

CVE-2024-47175: fix improper input validation in cups for PPD files...

9.8CVSS7.1AI score0.73062EPSS
Exploits5References1
Zero Day Initiative
Zero Day Initiative
added 2025/03/03 12:0 a.m.4 views

(Pwn2Own) HP LaserJet Pro MFP 3301fdw PostScript File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP LaserJet Pro MFP 3301fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. The issue results from th...

8.8CVSS7.1AI score0.01023EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/03/03 12:0 a.m.11 views

(Pwn2Own) HP LaserJet Pro MFP 3301fdw PostScript File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP LaserJet Pro MFP 3301fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. The issue results from th...

8.8CVSS7.1AI score0.00896EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/20 12:0 a.m.2 views

The vulnerability of HP LaserJet Pro printer’s microprogramming software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of HP LaserJet Pro printer’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges by sending data in PostScript format...

8.1CVSS8.7AI score0.01023EPSS
Exploits0References3Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/02/20 12:0 a.m.2 views

The vulnerability of Microprogrammed Software in HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed printers arises from buffer overflow in the stack, allowing attackers to execute arbitrary code and gain elevated privileges.

The vulnerability of Microprogrammed Software in HP LaserJet Pro, EHP LaserJet Enterprise, and HP LaserJet Managed printers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges by sending data in...

3.7CVSS8AI score0.00865EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/20 12:0 a.m.2 views

The vulnerability of Microprogrammed Software in HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed printers arises from the execution of operations outside of the buffer in memory. This allows attackers to execute arbitrary code and gain elevated privileges.

The vulnerability of Microprogrammed Software in HP LaserJet Pro, EHP LaserJet Enterprise, and HP LaserJet Managed printers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and increase thei...

7CVSS8.4AI score0.00896EPSS
Exploits0References2Affected Software9
RedhatCVE
RedhatCVE
added 2025/02/16 5:20 p.m.7 views

CVE-2025-26507

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

6.3CVSS7.6AI score0.00865EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/16 5:19 p.m.12 views

CVE-2025-26508

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job...

8.3CVSS7.6AI score0.00896EPSS
Exploits0References1
Rows per page
Query Builder