Lucene search
+L

846 matches found

OSV
OSV
added 2018/06/01 12:29 p.m.16 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS7.5AI score
SaveExploits0References6
NVD
NVD
added 2018/06/01 12:29 p.m.24 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS7AI score0.02582EPSS
SaveExploits0References6
CVE
CVE
added 2018/06/01 12:00 p.m.200 views

CVE-2018-11645

Ghostscript (psi/zfile.c) before 9.21rc1 permits the status command even with -dSAFER, enabling remote attackers to determine the existence and size of arbitrary files. This CVE (CVE-2018-11645) is referenced in multiple advisories; upstream context ties it to Ghostscript’s handling of SAFER and ...

5.3CVSS6.8AI score0.02582EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2018/06/01 12:00 p.m.35 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

7.7AI score0.02582EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2018/06/01 12:00 p.m.41 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS8.1AI score0.02582EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/06/01 12:00 a.m.41 views

CVE-2018-11645

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977...

5.3CVSS6.9AI score0.02582EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/04/27 12:00 a.m.45 views

Artifex Ghostscript PostScript Handling Buffer Overflow DoS

The version of Artifex Ghostscript installed on the remote Windows host is 9.22 or earlier. It is, therefore, affected by a denial of service vulnerability due to improperly handling PostScript data. A context-dependent attacker could cause a buffer overflow, potentially crashing the service. C...

7.8CVSS7.5AI score0.01837EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2018/04/20 3:18 a.m.43 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

9.3CVSS4.4AI score0.92499EPSS
SaveExploits4References1
OSV
OSV
added 2018/04/18 9:29 p.m.26 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS8.3AI score
SaveExploits0References7
Prion
Prion
added 2018/04/18 9:29 p.m.30 views

Buffer overflow

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

6.8CVSS7.9AI score0.01837EPSS
SaveExploits0References7Affected Software9
NVD
NVD
added 2018/04/18 9:29 p.m.21 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.9AI score0.01837EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2018/04/18 9:00 p.m.29 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.2AI score0.01837EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2018/04/18 9:00 p.m.44 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.4AI score0.01837EPSS
SaveExploits0
CVE
CVE
added 2018/04/18 9:00 p.m.224 views

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

7.8CVSS7.2AI score0.01837EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2018/04/18 9:00 p.m.37 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS8.3AI score0.01837EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2018/04/18 12:00 a.m.29 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.2AI score0.01837EPSS
SaveExploits0References2
CNVD
CNVD
added 2017/07/31 12:00 a.m.13 views

Artifex Ghostscript psi/ztoken.c File Denial of Service Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. A security...

7.8CVSS7.6AI score0.02303EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2017/07/28 9:22 a.m.26 views

CVE-2017-11714

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the...

7.8CVSS6.1AI score0.02303EPSS
SaveExploits0References1
OSV
OSV
added 2017/07/28 5:29 a.m.29 views

CVE-2017-11714

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the...

7.8CVSS7.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2017/07/28 5:00 a.m.72 views

CVE-2017-11714

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the...

7.8CVSS8.2AI score0.02303EPSS
SaveExploits0
Rows per page
Query Builder