Lucene search
K

5485 matches found

OSV
OSV
added 2023/06/25 10:15 p.m.1 views

DEBIAN-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.8AI score0.06431EPSS
Exploits3References1
NVD
NVD
added 2023/06/25 10:15 p.m.16 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.8AI score0.06431EPSS
Exploits3References7
UbuntuCve
UbuntuCve
added 2023/06/25 10:15 p.m.194 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.2AI score0.06431EPSS
Exploits3References2
OSV
OSV
added 2023/06/25 10:15 p.m.2 views

UBUNTU-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.1AI score0.06431EPSS
Exploits3References3
Prion
Prion
added 2023/06/25 10:15 p.m.23 views

Design/Logic Flaw

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

4.4CVSS7.6AI score0.06431EPSS
Exploits3References7Affected Software3
Positive Technologies
Positive Technologies
added 2023/06/25 12:0 a.m.3 views

PT-2023-3318 · Artifex +8 · Artifex Ghostscript +8

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions 10.01.2 and earlier Description: The issue arises from mishandled permission validation for pipe devices, specifically those with the %pipe% prefix or the | pipe character prefix. This can lead to command injectio...

8.8CVSS7.3AI score0.21677EPSS
Exploits9References124
CVE
CVE
added 2023/06/25 12:0 a.m.176 views

CVE-2023-36664

CVE-2023-36664 affects Artifex Ghostscript up to version 10.01.2. The issue is a mishandling of permission validation for pipe devices (prefixes %pipe% or the | character), which could allow arbitrary command execution when processing crafted documents. Public advisories confirm the vulnerability...

7.8CVSS7.7AI score0.06431EPSS
Exploits3References7Affected Software1
CNNVD
CNNVD
added 2023/06/25 12:0 a.m.2 views

Artifex Software Ghostscript 安全漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

7.8CVSS7.8AI score0.06431EPSS
Exploits3References13
AlpineLinux
AlpineLinux
added 2023/06/25 12:0 a.m.106 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS7.1AI score0.06431EPSS
Exploits3
Debian CVE
Debian CVE
added 2023/06/25 12:0 a.m.51 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

7.8CVSS8AI score0.06431EPSS
Exploits3
Cvelist
Cvelist
added 2023/06/25 12:0 a.m.19 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

8AI score0.06431EPSS
Exploits3References7
Vulnrichment
Vulnrichment
added 2023/06/25 12:0 a.m.10 views

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

6.6AI score0.06431EPSS
Exploits3References7
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.67 views

Artifex Ghostscript < 10.01.1 Buffer Overflow

The version of Artifex Ghostscript installed on the remote Windows host is prior to 10.01.1. It is, therefore, affected by a buffer overflow that can lead to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and...

9.8CVSS8.5AI score0.27763EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/06/09 12:0 a.m.2 views

PT-2023-35864 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves functions such as psi device ref finalize, gs gc reclaim, and...

6.9AI score
Exploits0References2
OpenVAS
OpenVAS
added 2023/06/09 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-2144)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7AI score0.00045EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/06/09 12:0 a.m.23 views

EulerOS 2.0 SP5 : ghostscript (EulerOS-SA-2023-2144)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an...

7.1CVSS7.3AI score0.00045EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/05/09 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1802)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.27763EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/05/09 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1820)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.27763EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2023-1705)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00201EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:0 a.m.29 views

EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2023-1820)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...

9.8CVSS8.4AI score0.27763EPSS
Exploits1References2
Rows per page
Query Builder