846 matches found
CVE-2017-9740
CVE-2017-9740 affects Artifex Ghostscript GhostXPS 9.21. The xps_decode_font_char_imp function in xps/xpsfont.c can be triggered by a crafted document to cause a heap-based buffer over-read, resulting in a denial of service and potentially other impact. This vulnerability is documented across mul...
CVE-2017-9727
The CVE-2017-9727 issue affects Artifex Ghostscript GhostXPS 9.21. The gx_ttfReader__Read function (base/gxttfb.c) is vulnerable, allowing remote attackers to trigger a denial of service via a crafted document through a heap-based buffer over-read, potentially causing an application crash. Connec...
CVE-2017-9619
CVE-2017-9619 affects Artifex Ghostscript GhostXPS 9.21. The xps_true_callback_glyph_name function in xps/xpsttf.c can be triggered by a crafted file to cause a segmentation fault, resulting in remote denial of service/application crash. The provided documents explicitly state the impact as a DoS...
CVE-2017-9726
The InsMDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9726
The InsMDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9727
The gxttfReaderRead function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9618
The xpsloadsfntname function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9739
The InsJMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9612
CVE-2017-9612 : The vulnerability is in Artifex Ghostscript GhostXPS 9.21. The Ins_IP function in base/ttinterp.c can be triggered by a crafted document to cause a denial of service via a use-after-free, potentially crashing the application and causing a partial impact to integrity/availability a...
CVE-2017-9619
The xpstruecallbackglyphname function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service Segmentation Violation and application crash via a crafted file...
CVE-2017-9739
The InsJMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9727
The gxttfReaderRead function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9620
The xpsselectfontencoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document, related to the xpsencodefontcharimp...
CVE-2017-9611
The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9727
The gxttfReaderRead function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9726
The InsMDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly have unspecified other impact via a crafted document...
CVE-2017-9835
The gsallocrefarray function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer...
Artifex Ghostscript Installed
Binary data ghostscriptdetect.nbin...
Artifex Ghostscript .rsdparams Operator Handling Type Confusion RCE
The version of Artifex Ghostscript installed on the remote Windows host is 9.21 or earlier. It is, therefore, affected by a type confusion error when handling the '.rsdparams' operator with a '/OutputFile %pipe%' substring. An unauthenticated, remote attacker can exploit this, via a specially...
