[SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2080-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 01, 2010 http://www.debian.org/security/faq -...

DSA-2080-1 ghostscript - several vulnerabilities

Bulletin has no description...

freetype: buffer overflow vulnerability

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:134)

Multiple vulnerabilities has been found and corrected in ghostscript : Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PDF file, as...

Mandriva Linux Security Advisory : ghostscript (MDVSA-2010:136)

Multiple vulnerabilities has been found and corrected in ghostscript : Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document containing a long name CVE-2009-4897...

Ghostscript Arbitrary Command Execution Vulnerability

This host is installed with Ghostscript and is prone to arbitrary command execution vulnerability. OpenVAS Vulnerability Test $Id: gbghostscriptcmdexecvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Ghostscript Arbitrary Command Execution Vulnerability. Authors: Madhuri D Copyright: Copyright c 2010...

Ghostscript Arbitrary Command Execution Vulnerability

Ghostscript is prone to an arbitrary command execution vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

openSUSE Security Update : ghostscript-devel (openSUSE-SU-2010:0425-1)

Specially crafted postscript .ps files could cause buffer overflows in ghostscript that could potentially be exploited to execute arbitrary code CVE-2010-1628, CVE-2010-1869, CVE-2009-4270 ghostscript by default read some initialization files from the current working directory. Local attackers...

CVE-2010-2055

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

DEBIAN-CVE-2010-2055

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

Design/Logic Flaw

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

CVE-2010-2055

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

CVE-2010-2055

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

CVE-2010-2055

Ghostscript before 8.71 is vulnerable to an information/command execution flaw where initialization files are read from the current working directory, enabling local users to run arbitrary PostScript via a Trojan horse file. Affected: Ghostscript 8.71 and earlier. Impact: local code/command execu...

CVE-2010-2055

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different...

Ghostscript - .PostScript File Stack Overflow

Ghostscript - .PostScript File Stack Overflow Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false, PrependSetresuid=false,...

GhostScript PostScript File Stack Overflow Exploit

Exploit for bsd platform in category local exploits ================================================== GhostScript PostScript File Stack Overflow Exploit ================================================== Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco -...

Ghostscript - '.PostScript' File Stack Overflow

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false, PrependSetresuid=false, PrependSetuid=false, LPORT=4444, RHOST=,...

Ubuntu Update for ghostscript vulnerabilities USN-961-1

Ubuntu Update for Linux kernel vulnerabilities USN-961-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9611.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for ghostscript vulnerabilities USN-961-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : ghostscript vulnerabilities (USN-961-1)

David Srbecky discovered that Ghostscript incorrectly handled debug logging. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. This issue only affected...