Lucene search
K

2801 matches found

Cvelist
Cvelist
added 2008/03/18 10:0 p.m.26 views

CVE-2008-0997

Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted PostScript Printer Description PPD file that is not properly handled when querying a network printer...

9.2AI score0.03642EPSS
Exploits1References8
CVE
CVE
added 2008/03/18 10:0 p.m.46 views

CVE-2008-0997

CVE-2008-0997 : A stack-based buffer overflow in AppKit on Apple Mac OS X 10.4.11 can be exploited by a crafted PostScript Printer Description (PPD) file when querying a network printer, enabling a user-assisted remote attacker to terminate the application or execute arbitrary code. Affected soft...

6.8CVSS9.2AI score0.03642EPSS
Exploits1References8Affected Software2
Gentoo Linux
Gentoo Linux
added 2008/03/08 12:0 a.m.23 views

Ghostscript: Buffer overflow

Background Ghostscript is a suite of software based on an interpreter for PostScript and PDF. Description Chris Evans Google Security discovered a stack-based buffer overflow within the zseticcspace function in the file zicc.c when processing a PostScript file containing a long "Range" array in a...

6.8CVSS7.3AI score0.14409EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2008/03/07 12:0 a.m.21 views

Fedora 7 : ghostscript-8.15.4-4.fc7 (2008-2084)

This update contains a back-ported fix for a security issue that allows malicious PostScript input files to cause a stack-based buffer overflow CVE-2008-0411. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

6.8CVSS5.4AI score0.14409EPSS
Exploits1References3
Fedora
Fedora
added 2008/03/06 4:39 p.m.21 views

[SECURITY] Fedora 7 Update: ghostscript-8.15.4-4.fc7

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

6.8CVSS1.5AI score0.14409EPSS
Exploits1
Fedora
Fedora
added 2008/03/03 6:24 p.m.18 views

[SECURITY] Fedora 8 Update: ghostscript-8.61-8.fc8

Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into ma...

6.8CVSS1.5AI score0.14409EPSS
Exploits1
Prion
Prion
added 2008/02/28 9:44 p.m.13 views

Stack overflow

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

6.8CVSS8.1AI score0.14409EPSS
Exploits1References27Affected Software1
UbuntuCve
UbuntuCve
added 2008/02/28 9:44 p.m.23 views

CVE-2008-0411

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

6.8CVSS6.2AI score0.14409EPSS
Exploits1References2
OSV
OSV
added 2008/02/28 9:44 p.m.5 views

CVE-2008-0411

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

7.8AI score
Exploits0References30
Cvelist
Cvelist
added 2008/02/28 9:0 p.m.21 views

CVE-2008-0411

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

7.6AI score0.14409EPSS
Exploits1References27
CVE
CVE
added 2008/02/28 9:0 p.m.64 views

CVE-2008-0411

CVE-2008-0411 is a Ghostscript vulnerability affecting 8.61 and earlier where a stack-based buffer overflow in the zseticcspace function (zicc.c) allows a remote attacker to execute arbitrary code via a crafted PostScript file containing a long Range array in a .seticcspace operator. The issue is...

6.8CVSS7.6AI score0.14409EPSS
Exploits1References27Affected Software1
Debian CVE
Debian CVE
added 2008/02/28 9:0 p.m.17 views

CVE-2008-0411

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

6.8CVSS7.7AI score0.14409EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/02/28 12:0 a.m.17 views

Debian: Security Advisory (DSA-1510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.6AI score0.14409EPSS
Exploits1References3
FreeBSD
FreeBSD
added 2008/02/28 12:0 a.m.28 views

ghostscript -- zseticcspace() function buffer overflow vulnerability

Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary code execution. A stack-based buffer overflow in the zseticcspace function in zicc.c allows remote arbitrary code execution via a malicious PostScript file .ps that contains a lon...

6.8CVSS7.6AI score0.14409EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2008/02/27 10:11 p.m.32 views

Important: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Ghostscript is a program for displaying PostScript files, or printing them to...

6.8CVSS6AI score0.14409EPSS
Exploits1References2
OSV
OSV
added 2008/02/27 12:0 a.m.12 views

DSA-1510-1 gs-esp gs-gpl - arbitrary code execution

Bulletin has no description...

6.8CVSS6.3AI score0.14409EPSS
Exploits1
Fedora
Fedora
added 2008/01/19 12:0 a.m.32 views

[SECURITY] Fedora 7 Update: cairo-1.4.14-1.fc7

Cairo is a vector graphics library designed to provide high-quality display and print output. Currently supported output targets include the X Window System, OpenGL via glitz, in-memory image buffers, and image files PDF, PostScript, and SVG. Cairo is designed to produce identical output on all...

6.8CVSS0.6AI score0.05486EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.23 views

Debian Security Advisory DSA 612-1 (a2ps)

The remote host is missing an update to a2ps announced via advisory DSA 612-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.6AI score0.15981EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.28 views

Debian Security Advisory DSA 176-1 (gv)

The remote host is missing an update to gv announced via advisory DSA 176-1. OpenVAS Vulnerability Test $Id: deb1761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 176-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

4.6CVSS0.5AI score0.02025EPSS
Exploits1
OpenVAS
OpenVAS
added 2008/01/17 12:0 a.m.38 views

Debian Security Advisory DSA 293-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 293-1. OpenVAS Vulnerability Test $Id: deb2931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 293-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.1AI score0.04033EPSS
Exploits0
Rows per page
Query Builder