Design/Logic Flaw

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to...

CVE-2023-3514 RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral =7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule" or "UninstallModules" command to...

PT-2023-25155 · Razer · Razercentral

Name of the Vulnerable Software and Affected Versions: RazerCentral versions prior to 7.11.0.558 Description: The issue is related to improper privilege control in the RazerCentralSerivce Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by...

Razer Central 安全漏洞

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central 7.11.0.558 and prior versions, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges and...

PT-2023-25160 · Razer · Razercentral

Name of the Vulnerable Software and Affected Versions: RazerCentral versions prior to 7.11.0.558 Description: The issue is related to improper privilege control in the RazerCentralService Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by...

Razer Central 安全漏洞

Razer Central is the peripheral control center for Razer Corporation USA. A security vulnerability exists in Razer Central version 7.11.0.558 and earlier, which stems from improper privilege control in the named pipe and allows a malicious attacker with local access to gain system privileges by...

USN-6213-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

USN-6213-1: Ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code...

Debian DSA-5446-1 : ghostscript - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5446 advisory. - Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix. CVE-2023-36664 Note tha...

CVE-2023-36664

A vulnerability was found in Ghostscript. This flaw occurs due to a mishandled permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

SUSE CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

ALPINE-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

DEBIAN-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

UBUNTU-CVE-2023-36664

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

Design/Logic Flaw

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the %pipe% prefix or the | pipe character prefix...

PT-2023-3318 · Artifex +8 · Artifex Ghostscript +8

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions 10.01.2 and earlier Description: The issue arises from mishandled permission validation for pipe devices, specifically those with the %pipe% prefix or the | pipe character prefix. This can lead to command injectio...

CVE-2023-36664

CVE-2023-36664 affects Artifex Ghostscript up to version 10.01.2. The issue is a mishandling of permission validation for pipe devices (prefixes %pipe% or the | character), which could allow arbitrary command execution when processing crafted documents. Public advisories confirm the vulnerability...