FreeBSD : Ghostscript -- arbitrary code execution (30c0f878-b03e-11e8-be8a-0011d823eebd)

CERT reports : Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript operations. Multiple PostScript operations bypass the protections provided by -dSAFER, which can allow an attacker to execute arbitrary commands with arbitrary arguments. This...

Ghostscript - Multiple Vulnerabilities

Exploit for linux platform in category local exploits http://seclists.org/oss-sec/2018/q3/142 These are critical and trivial remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools. ---- Hello, this was discussed on the distros list, but it was suggested t...

Ghostscript - Multiple Vulnerabilities

Ghostscript - Multiple Vulnerabilities http://seclists.org/oss-sec/2018/q3/142 These are critical and trivial remote code execution bugs in things like ImageMagick, Evince, GIMP, and most other PDF/PS tools. ---- Hello, this was discussed on the distros list, but it was suggested to move discussi...

Ghostscript -- arbitrary code execution

CERT reports: Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript operations. Multiple PostScript operations bypass the protections provided by -dSAFER, which can allow an attacker to execute arbitrary commands with arbitrary arguments. This vulnerabili...

Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities

Overview Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system. Description Ghostscript contains an optional -dSAFER option, which is supposed to prevent unsafe PostScript...

GLSA-201804-15 : Evince: Command injection

The remote host is affected by the vulnerability described in GLSA-201804-15 Evince: Command injection A vulnerability was discovered in Evinces handling of filenames while printing PDF files. Impact : A remote attacker, by enticing the user to process a specially crafted file, could execute...

Evince: Command injection

Background Evince is a document viewer for multiple document formats, including PostScript. Description A vulnerability was discovered in Evince’s handling of filenames while printing PDF files. Impact A remote attacker, by enticing the user to process a specially crafted file, could execute...

SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2018:0947-1)

This update for evince fixes the following issues : - CVE-2017-1000159: Command injection in evince via filename when printing to PDF could lead to command execution bsc1070046 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

openSUSE Security Update : evince (openSUSE-2018-367)

This update for evince fixes the following issues : - CVE-2017-1000159: Command injection in evince via filename when printing to PDF could lead to command execution bsc1070046 This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security,...

SUSE-SU-2018:0947-1 Security update for evince

This update for evince fixes the following issues: - CVE-2017-1000159: Command injection in evince via filename when printing to PDF could lead to command execution bsc1070046...

PT-2019-4925 · Gnome +4 · Evince +4

Name of the Vulnerable Software and Affected Versions: Evince version 3.26.0 Description: The issue is caused by a buffer overflow in the backend/tiff/tiff-document.c component of the Evince document viewer. This can be exploited by a remote attacker using a specially crafted PDF file, potentiall...

Solaris 10 (x86) : 150617-01

SunOS 5.10x86: Evince Patch. Date this patch was last updated by Sun : Sep/12/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 150617-03

SunOS 5.10x86: Evince Patch. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SUSE SLES11 Security Update : evince (SUSE-SU-2018:0639-1)

This update for evince provides the following fix : - CVE-2017-1000159: Prevent command line injections via filenames when printing to a file. bsc1070046 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

SUSE-SU-2018:0639-1 Security update for evince

This update for evince provides the following fix: - CVE-2017-1000159: Prevent command line injections via filenames when printing to a file. bsc1070046...

Debian: Security Advisory (DLA-1031-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Evince document viewing software lies in its inability to eliminate special elements, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the Evince document viewing software backend/comics/comics-document.c is related to the failure to eliminate special elements used in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially prepared a.cbt file, which is...

EulerOS 2.0 SP1 : evince (EulerOS-SA-2018-1009)

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.CVE-2017-1000159 Note that Tenable Networ...

EulerOS 2.0 SP2 : evince (EulerOS-SA-2018-1010)

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.CVE-2017-1000159 Note that Tenable Networ...

Fedora Update for evince FEDORA-2017-d6402c8005

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...