Lucene search
K

5485 matches found

OSV
OSV
added 2017/03/07 3:59 p.m.5 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS6.8AI score
Exploits0References16
Prion
Prion
added 2017/03/07 3:59 p.m.21 views

Design/Logic Flaw

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

4.3CVSS6.7AI score0.00222EPSS
Exploits0References9Affected Software2
ATTACKERKB
ATTACKERKB
added 2017/03/07 3:59 p.m.3 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS5.6AI score0.00222EPSS
Exploits0References10
OSV
OSV
added 2017/03/07 3:59 p.m.2 views

DEBIAN-CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS7.1AI score0.00222EPSS
Exploits0References1
CVE
CVE
added 2017/03/07 3:0 p.m.101 views

CVE-2013-5653

CVE-2013-5653 affects Ghostscript and stems from the getenv and filenameforall functions not honoring -dSAFER, enabling an attacker to read environment variables or list directories via a crafted PostScript document. The issue is documented across multiple sources (e.g., NVD description and IBM P...

5.5CVSS6.7AI score0.00222EPSS
Exploits0References9Affected Software1
Debian CVE
Debian CVE
added 2017/03/07 3:0 p.m.28 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

5.5CVSS7.3AI score0.00222EPSS
Exploits0
Cvelist
Cvelist
added 2017/03/07 3:0 p.m.19 views

CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

6.9AI score0.00222EPSS
Exploits0References9
CNVD
CNVD
added 2017/03/07 12:0 a.m.1 views

Multiple Information Disclosure Vulnerabilities in Ghostscript

Ghostscript is a program for displaying PostScript files or printing them to non-PostScript printers. Ghostscript has multiple information disclosure vulnerabilities. An attacker could exploit this vulnerability to obtain sensitive information...

5.5CVSS6.4AI score0.00222EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2017/02/28 9:21 a.m.38 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS6.6AI score0.00351EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/27 12:0 a.m.2 views

Artifex Software Ghostscript 'gx_image_enum_begin' function memory misquote misses

Artifex Software Ghostscript is an open source Postscript parser that displays Postscript files and prints them on non-Postscript printers. A memory misreference vulnerability exists in the 'gximageenumbegin' function in the base/gxipixel.c file of Artifex Software Ghostscript. A remote attacker...

7.8CVSS7AI score0.00351EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/02/24 4:59 a.m.27 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS7.2AI score0.00351EPSS
Exploits0References1
OSV
OSV
added 2017/02/24 4:59 a.m.1 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS5.9AI score0.00351EPSS
Exploits0References5
OSV
OSV
added 2017/02/24 4:59 a.m.0 views

UBUNTU-CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS7.2AI score0.00351EPSS
Exploits0References2
NVD
NVD
added 2017/02/24 4:59 a.m.17 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS8.2AI score0.00351EPSS
Exploits0References5
Prion
Prion
added 2017/02/24 4:59 a.m.18 views

Design/Logic Flaw

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

6.8CVSS8.1AI score0.00351EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2017/02/24 4:23 a.m.18 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.5AI score0.00351EPSS
Exploits0References5
CVE
CVE
added 2017/02/24 4:23 a.m.74 views

CVE-2017-6196

CVE-2017-6196 is a Ghostscript vulnerability described in the Mageia advisory MGASA-2017-0430 and related OpenVAS/Fedora entries. It covers multiple use-after-free defects in the GX image enumeration path (base/gxipixel.c: gx_image_enum_begin) that may be exploitable via a crafted PostScript docu...

7.8CVSS7.3AI score0.00351EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2017/02/24 4:23 a.m.35 views

CVE-2017-6196

Multiple use-after-free vulnerabilities in the gximageenumbegin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted PostScript...

7.8CVSS8.2AI score0.00351EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/02/23 12:0 a.m.32 views

GLSA-201702-31 : GPL Ghostscript: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-31 GPL Ghostscript: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript and the bundled OpenJPEG. Please review the CVE identifiers and GLSA-201612-26 OpenJPEG referenced below for...

9.8CVSS7.8AI score0.46832EPSS
Exploits0References7
Gentoo Linux
Gentoo Linux
added 2017/02/22 12:0 a.m.42 views

GPL Ghostscript: Multiple vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript and the bundled OpenJPEG. Please review the CVE identifiers and GLSA-201612-26 OpenJPEG referenced below for additional information. Note:...

9.8CVSS3.4AI score0.46832EPSS
Exploits0
Rows per page
Query Builder