CVE-2008-0411

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

ghostscript, hpijs security update

CentOS Errata and Security Advisory CESA-2008:0155 Updated ghostscript packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Ghostscript is a program for...

Debian Security Advisory DSA 1510-1 (gs-esp / gs-gpl)

The remote host is missing an update to gs-esp / gs-gpl announced via advisory DSA 1510-1. OpenVAS Vulnerability Test $Id: deb15101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1510-1 gs-esp / gs-gpl Authors: Thomas Reinke Copyright: Copyright c 2008...

Important: ghostscript security update

7.05-32.1.13 - Applied patch to fix CVE-2008-0411 bug 433366...

CentOS 3 / 4 / 5 : ghostscript (CESA-2008:0155)

Updated ghostscript packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Ghostscript is a program for displaying PostScript files, or printing them to...

Debian DSA-1510-1 : ghostscript - buffer overflow

Chris Evans discovered a buffer overflow in the color space handling code of the Ghostscript PostScript/PDF interpreter, which might result in the execution of arbitrary code if a user is tricked into processing a malformed file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

RHEL 4 / 5 : ghostscript (RHSA-2008:0155)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2008:0155 advisory. - ghostscript: stack-based buffer overflow in .seticcspace operator CVE-2008-0411 Note that Nessus has not tested for this issue but has instead...

Debian: Security Advisory (DSA-1510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript -- zseticcspace() function buffer overflow vulnerability

Chris Evans from the Google Security Team reports: Severity: parsing of evil PostScript file will result in arbitrary code execution. A stack-based buffer overflow in the zseticcspace function in zicc.c allows remote arbitrary code execution via a malicious PostScript file .ps that contains a lon...

ghostscript: stack-based buffer overflow in .seticcspace operator

Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator...

Important: Red Hat Security Advisory: ghostscript security update

Updated ghostscript packages that fix a security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Ghostscript is a program for displaying PostScript files, or printing them to...

[SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1510-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 27, 2008 http://www.debian.org/security/faq -...

Ghostscript 8.0.18.15 - zseticcspace() Remote Buffer Overflow

Ghostscript 8.0.18.15 - zseticcspace Remote Buffer Overflow // source: https://www.securityfocus.com/bid/28017/info Ghostscript is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Successfully exploiting this issue may allow...

DSA-1510-1 gs-esp gs-gpl - arbitrary code execution

Bulletin has no description...

PT-2008-2043 · Artifex +1 · Ghostscript +1

Name of the Vulnerable Software and Affected Versions: Ghostscript versions 8.61 and earlier Description: The issue allows remote attackers to execute arbitrary code via a postscript .ps file containing a long Range array in a .seticcspace operator. This is due to a stack-based buffer overflow in...

Ghostscript buffer overflow

No description provided...

Debian Security Advisory DSA 296-1 (kdebase)

The remote host is missing an update to kdebase announced via advisory DSA 296-1. OpenVAS Vulnerability Test $Id: deb2961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 296-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 284-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 284-1. OpenVAS Vulnerability Test $Id: deb2841.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 284-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 792-1 (pstotext)

The remote host is missing an update to pstotext announced via advisory DSA 792-1. Max Vozeler discovered that pstotext, a utility to extract text from PostScript and PDF files, did not execute ghostscript with the -dSAFER argument, which prevents potential malicious operations to happen. For the...

Debian Security Advisory DSA 293-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 293-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...