CVE-2017-0261

CVE-2017-0261 とエクスプロイトサンプル分析 0x01 脆弱性の説明 原因：Office文書を開くと、FLTLDR.EXEが起動され、この脆弱性を含む埋め込みEPSファイルのレンダリングに使用される。このファイルはPostScript言語で書かれており、攻撃者は"save-restore"操作を利用してこれを悪用できる。その本質はUAF（Use-After-Free）脆弱性である。 ユーザーが不正な形式のグラフィック画像を含むファイルを開いた場合、または不正な形式のグラフィック画像をOfficeファイルに挿入した場合に、この脆弱性が悪用される可能性がある。...

PIL-RCE-Ghostscript-CVE-2018-16509

Python PIL/Pillow の Ghostscript CVE-2018-16509 を介したリモートシェルコマンド実行 https://github.com/ysrc/PIL-RCE-By-GhostButt（CVE-2017-8291 を介した PIL/Pillow RCE）に触発されたものです。この Docker 環境のバージョンは、より新しいバージョンの Ghostscript（v9.23）とより新しいエクスプロイト（CVE-2018-16509）を使用しています。 Ghostscript は、Adobe Systems の PostScript および Portable...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDFプレビュー Exploit PoC このエクスプロイトは、PostScript出力が反映されず、png画像を介したPDFプレビューなどで実行されるGS環境におけるCVE-2019-14811を標的としています。 エクスプロイトはpngXXmプレビューで直接コマンドを描画します。これは https://github.com/hhc0null/GhostRule/blob/master/ghostrule1.ps に基づいています。...

PRET

PRET - プリンター悪用ツールキット あなたのプリンターは安全ですか？誰かに先にチェックされないうちに...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 CVE-2023-43115 を理解するためのサンプル付きの簡単な解説書。 !警告 これは主に自分自身が問題を理解し、サイバーセキュリティについて学ぶために書いたものです。したがって、誤りが含まれている可能性があります。 問題 IJS デバイス（改良インクジェット印刷）を利用するには、Ghostscript が IJS サーバーを起動する必要があります。これは、IjsServer パラメータで指定されたパスを使用して行われます。IjsServer...

CVE-2018-16509

GNU Ghostscript version 5.50 ܸ첽ѥå gs550j Version 0.3 Jun. 22, 1999 by 翹 [email protected] Copyright C 1996-1999 Daisuke SUZUKI. Copyright C 1999 Norihito Ohmori. Ϥ Υѥåһ[email protected]κ줿 ghostscript-2.6.1 ܸ첽ѥåΥɥ饤Фȡɻŵ 줿 ܸ Font Driver on VFlib version 1.0 ghostscript 5.50 б ů...

Rocky Linux 8 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2026_36733)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636733 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has extracted th...

CentOS Linux 8.4 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1759329269)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1759329269 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible t...

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2024:1720178510)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1720178510 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-base...

Linux Distros Unpatched Vulnerability : CVE-2026-19547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.6:CLSA-2026:1777462768)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777462768 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a...

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2026:1777541087)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777541087 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...

Rocky Linux 9 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2026_39316)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639316 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has extracted th...

Rocky Linux 10.2 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2026_39302)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639302 advisory. cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 Tenable has extracted...

CentOS Linux 8.4 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.4:CLSA-2026:1777392877)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777392877 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...

CentOS Linux 8.5 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1759332650)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1759332650 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible t...

CentOS Linux 8.5 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS8.5:CLSA-2026:1777393200)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777393200 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...

CentOS Linux 8 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS-STREAM8:CLSA-2026:1777540724)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777540724 advisory. - Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a...

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2026:1777481673)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777481673 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1773924173)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1773924173 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions 14.10.1 and below have a NULL...