3 matches found
ghostscript: use-after-free in copydevice handling (699661)
It was discovered that the ghostscript PDF14 compositor did not properly handle the copying of a device. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or, possibly, execute arbitrary code in the ghostscript context via a specially crafted PostScrip...
Artifex Software Ghostscript 'pdf14_open' Function Denial of Service Vulnerability
Artifex Software Ghostscript is an open source PostScript parser from Artifex Software, which displays Postscript files and prints them on non-Postscript printers. A security vulnerability exists in the 'pdf14open' function in the base/gdevp14.c file in Artifex Software Ghostscript version 9.20. ...
UBUNTU-CVE-2016-10217
The pdf14open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted file that is mishandled in the color management module...