Ghostscript gdevpdtb.c文件栈溢出漏洞

BUGTRAQ ID: 34340 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 Ghostscript的src/gdevpdtb.c文件中的pdfbasefontalloc函数没有正确地为字体分配缓冲区。如果用户受骗将特制的Postscript文件转换成PDF文件的话，就可以触发栈溢出，导致执行任意代码。 Ghostscript 8.x Ghostscript ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

DTSA-198-1 ghostscript - integer overflows

Bulletin has no description...

Ghostscript CCITTFax解码过滤器拒绝服务漏洞

BUGTRAQ ID: 34337 Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。 如果Ghostscript的CCITTFax解码过滤器解析了特制的PDF文件的话，就可能导致Ghostscript脚本崩溃。 Ghostscript Ghostscript 8.x Ghostscript ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://bugzilla.redhat.com/attachment.cgi?id=310029...

Ghostscript 'CCITTFax' Decoding Filter Denial of Service Vulnerability

No description provided by source. Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed...

Ghostscript CCITTFax Decoding Filter - Denial of Service

Ghostscript CCITTFax Decoding Filter - Denial of Service Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has no...

Ghostscript 'CCITTFax' Decoding Filter - Denial of Service

Ghostscript is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied input. Exploiting this issue allows remote attackers to crash the application and possibly to execute code, but this has not been confirmed. Vulnerable: Ubuntu Ubuntu Linux 8.10...

Fedora Core 9 FEDORA-2009-2883 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-2883. OpenVAS Vulnerability Test $Id: fcore20092883.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2883 ghostscript Authors: Thomas Reinke Copyright: Copyright c...

Gentoo Security Advisory GLSA 200903-37 (ghostscript-gpl ghostscript-esp ghostscript-gnu)

The remote host is missing updates announced in advisory GLSA 200903-37. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CentOS Security Advisory CESA-2009:0345 (ghostscript)

The remote host is missing updates to ghostscript announced in advisory CESA-2009:0345. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200903-37 (ghostscript-gpl ghostscript-esp ghostscript-gnu)

The remote host is missing updates announced in advisory GLSA 200903-37. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CentOS Security Advisory CESA-2009:0345 (ghostscript)

The remote host is missing updates to ghostscript announced in advisory CESA-2009:0345. CESA-2009:0345 63705 8 $Id: ovcesa20090345.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0345 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-2885 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-2885. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Fedora Core 9 FEDORA-2009-2883 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-2883. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Debian: Security Advisory (DSA-1746-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 10 FEDORA-2009-2885 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory FEDORA-2009-2885. OpenVAS Vulnerability Test $Id: fcore20092885.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2885 ghostscript Authors: Thomas Reinke Copyright: Copyright c...

Debian Security Advisory DSA 1746-1 (ghostscript)

The remote host is missing an update to ghostscript announced via advisory DSA 1746-1. OpenVAS Vulnerability Test $Id: deb17461.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1746-1 ghostscript Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

GLSA-200903-37 : Ghostscript: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200903-37 Ghostscript: User-assisted execution of arbitrary code Jan Lieskovsky from the Red Hat Security Response Team discovered the following vulnerabilities in Ghostscript's ICC Library: Multiple integer overflows CVE-2009-058...

openSUSE 10 Security Update : ghostscript-devel (ghostscript-devel-6065)

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files CVE-2009-0583, CVE-2009-0584. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

DEBIAN-CVE-2009-0583

Multiple integer overflows in icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service heap-based buffer overflow and...

CVE-2009-0584

icc.c in the International Color Consortium ICC Format library aka icclib, as used in Ghostscript 8.64 and earlier and Argyll Color Management System CMS 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code by usin...