Command injection

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

PT-2021-23745

Name of the Vulnerable Software and Affected Versions iText versions prior to 7.1.17 Description The issue allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java. This can occur when a malicious filename is provided ...

WS-2021-0588

In ghostscript there is Heap-buffer-overflow in chunkobjalloc...

CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113: Improper Neutralization of Special Elements used in a Command

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

CVE-2021-43113

The CVE-2021-43113 case concerns iTextPDF (iText 7 era) where the CompareTool filename handling interacts with Ghostscript, enabling a command injection via GhostscriptHelper.java. Affected products/versions: iTextPDF before 7.1.17 (up to but not including 4.4.13.3); the Debian/libitext5-java adv...

WS-2021-0589

In ghostscript there is Heap-use-after-free in stell...

ghostscript:gstoraster_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5478077747036160 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffeb801026d Crash State: NULL Sanitizer: address AS...

WS-2021-0590

In ghostscript there is Global-buffer-overflow in searchtable1...

WS-2021-0583

In ghostscript there is Memcpy-param-overlap in pdfisetinputstream...

WS-2021-0591

In ghostscript there is Global-buffer-overflow in pdfifapigetglyph...

WS-2021-0584

In ghostscript there is Heap-buffer-overflow in pdfidereference...

WS-2021-0581

In ghostscript there is Heap-buffer-overflow in pdfirepairfile...

WS-2021-0586

In ghostscript there is Stack-buffer-overflow in pdfiannotdraw...

WS-2021-0587

In ghostscript there is Stack-buffer-underflow in readxref...

WS-2021-0592

In ghostscript there is Heap-use-after-free in chunkfreeobject...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in chunk_obj_alloc

Detailed Report: https://oss-fuzz.com/testcase?key=6480302661304320 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x631000000023 Crash State: chunkobjalloc...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_annot_draw

Detailed Report: https://oss-fuzz.com/testcase?key=5662241045741568 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fbc61ad24d4 Crash State: pdfiannotdraw...