Artifex Ghostscript 9.55 DoS

The version of Artifex Ghostscript installed on the remote Windows host is 9.55. It is, therefore, affected by a NULL pointer dereference vulnerabiulity leading to denial of service. The DoS occurs when Ghostscript tries to render a large number of bits in memory. When allocating a buffer device,...

Ubuntu 16.04 ESM : Ghostscript vulnerability (USN-5618-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5618-1 advisory. It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an...

Ubuntu: Security Advisory (USN-5618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5123070645370880 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHW...

USN-5618-1 ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

USN-5618-1: Ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

Denial Of Service (DoS)

ghostscript is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer over write vulnerability was found in GhostScript's lp8000printpage function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that...

Artifex Ghostscript Remote Code Execution (CVE-2018-16509)

A remote code execution vulnerability exists in Artifex Ghostscript. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ghostscript:gs_device_pdfwrite_fuzzer: Segv on unknown address in deflate

Detailed Report: https://oss-fuzz.com/testcase?key=6444829516627968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: deflate szlibEprocess...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in Ins_PUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=6480202129080320 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000086d68 Crash State: InsPUSHB...

PT-2022-37275 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. Technical details include a crash state involving functions such as gs type2 interpret, copie...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=4704787672727552 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fff31529760 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in Ins_ISECT

Detailed Report: https://oss-fuzz.com/testcase?key=5984645832900608 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x633000071468 Crash State: InsISECT RunIns...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type1_piece_codes

Detailed Report: https://oss-fuzz.com/testcase?key=6048427783356416 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fff06cf82dc Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in names_index_ref

Detailed Report: https://oss-fuzz.com/testcase?key=4880033168097280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f004020468 Crash State: namesindexref...

Debian dla-3096 : ghostscript - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3096 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3096-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3096-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3096-1] ghostscript security update

Debian LTS Advisory DLA-3096-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 04, 2022 https://wiki.debian.org/LTS Package : ghostscript Version : 9.27dfsg-2+deb10u6 CVE ID : CVE-2020-27792 A heap-based buffer over write vulnerability was found in...

PT-2022-37240 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as xps tifsSeekProc, TIFFRewriteDirectory, and TIFFFlush. N...