Lucene search
K

5485 matches found

NVD
NVD
added 2018/04/24 1:29 a.m.13 views

CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

5.5CVSS5.8AI score0.0045EPSS
Exploits0References6
Cvelist
Cvelist
added 2018/04/23 9:0 p.m.26 views

CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

5.3CVSS6.5AI score0.0045EPSS
Exploits0References6
CVE
CVE
added 2018/04/23 9:0 p.m.104 views

CVE-2016-9601

CVE-2016-9601 : Ghostscript before version 9.21 is vulnerable to a heap-based buffer overflow in the jbig2_decode_gray_scale_image function used for JBIG2 halftone decoding, potentially causing a segmentation fault when parsing a crafted PostScript/PDF with an embedded JBIG2 image, per multiple c...

5.5CVSS6.4AI score0.0045EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2018/04/23 9:0 p.m.35 views

CVE-2016-9601

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2decodegrayscaleimage function which is used to decode halftone segments in a JBIG2 image. A document PostScript or PDF with an embedded, specially crafted, jbig2 image could trigge...

5.5CVSS6.7AI score0.0045EPSS
Exploits0
CNVD
CNVD
added 2018/04/23 12:0 a.m.1 views

Ghostscript Arbitrary Code Execution Vulnerability

Artifex Ghostscript is the United States Artifex Software, Inc. of an open source PostScript a page description language used in the electronic industry and desktop publishing and programming languages parser, which can display Postscript files and print on non-Postscript printer. pdfwrite is one...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2018/04/20 3:18 a.m.36 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

9.3CVSS4.4AI score0.9181EPSS
Exploits4References1
NVD
NVD
added 2018/04/18 9:29 p.m.17 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.9AI score0.00648EPSS
Exploits0References7
OSV
OSV
added 2018/04/18 9:29 p.m.1 views

DEBIAN-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.5AI score0.00648EPSS
Exploits0References1
OSV
OSV
added 2018/04/18 9:29 p.m.2 views

ALPINE-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.5AI score0.00648EPSS
Exploits0References1
Prion
Prion
added 2018/04/18 9:29 p.m.25 views

Buffer overflow

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

6.8CVSS7.9AI score0.00648EPSS
Exploits0References7Affected Software9
OSV
OSV
added 2018/04/18 9:29 p.m.19 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS8.3AI score
Exploits0References7
CVE
CVE
added 2018/04/18 9:0 p.m.201 views

CVE-2018-10194

Ghostscript vulnerability CVE-2018-10194 resides in the pdfwrite code path (gdevpdts.c) where a stack-based out-of-bounds write in pdf_set_text_matrix can be triggered by a crafted PDF. Affected product is Ghostscript; historical references show the issue affecting Ghostscript up to version 9.22,...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2018/04/18 9:0 p.m.13 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.2AI score0.00648EPSS
Exploits0References7
AlpineLinux
AlpineLinux
added 2018/04/18 9:0 p.m.33 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.4AI score0.00648EPSS
Exploits0
Debian CVE
Debian CVE
added 2018/04/18 9:0 p.m.29 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS8.3AI score0.00648EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2018/04/18 12:0 a.m.26 views

CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References2
OSV
OSV
added 2018/04/18 12:0 a.m.2 views

UBUNTU-CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

7.8CVSS7.2AI score0.00648EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/03/12 12:0 a.m.15 views

Solaris 10 (sparc) : 122259-09

SunOS 5.10: SunFreeware GNU ESP Ghostscript Patch. Date this patch was last updated by Sun : Dec/15/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

7AI score
Exploits0References1
OSV
OSV
added 2018/02/25 5:31 p.m.4 views

MGASA-2018-0142 Updated ghostscript packages fix security vulnerability

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document CVE-2016-10317...

7.8CVSS7.8AI score0.00837EPSS
Exploits1References3
Mageia
Mageia
added 2018/02/25 5:31 p.m.32 views

Updated ghostscript packages fix security vulnerability

The fillthreshholdbuffer function in base/gxhtthresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PostScript document CVE-2016-10317...

7.8CVSS6AI score0.00837EPSS
Exploits1References2
Rows per page
Query Builder