Lucene search
+L

3411 matches found

Debian
Debian
•added 2017/04/28 11:51 a.m.•144 views

[SECURITY] [DSA 3838-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3838-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 28, 2017 https://www.debian.org/security/faq -...

6.8CVSS2AI score0.96968EPSS
SaveExploits10
CNVD
CNVD
•added 2017/04/28 12:00 a.m.•13 views

Artifex Ghostscript Remote Command Execution Vulnerability

Artifex Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. Postscript file. Artifex Ghostscrip...

7.8CVSS7.3AI score0.96968EPSS
SaveExploits7References1
OpenVAS
OpenVAS
•added 2017/04/27 12:00 a.m.•45 views

Debian: Security Advisory (DSA-3838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.96968EPSS
SaveExploits10References5
osv_ubuntu
osv_ubuntu
•added 2017/04/26 12:00 a.m.•28 views

UBUNTU-CVE-2017-8291

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile %pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017...

7.8CVSS7.1AI score0.96968EPSS
SaveExploits7References7
CNVD
CNVD
•added 2017/04/26 12:00 a.m.•25 views

Artifex Ghostscript mark_curve Denial of Service Vulnerability

Ghostscript is a set of software based on Adobe Systems PostScript and Portable Document Format PDF page description language interpreter. The markcurve function in Artifex Ghostscript suffers from an integer overflow problem that allows a remote attacker to cause a denial of service out-of-bound...

7.8CVSS7.1AI score0.0162EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2017/04/24 3:18 p.m.•39 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS6.7AI score0.0162EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/04/19 2:59 p.m.•38 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.8AI score
SaveExploits0References3
osv_debian
osv_debian
•added 2017/04/19 2:59 p.m.•13 views

DEBIAN-CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.8AI score0.0162EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2017/04/19 2:59 p.m.•34 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.2AI score0.0162EPSS
SaveExploits1References3
Prion
Prion
•added 2017/04/19 2:59 p.m.•38 views

Integer overflow

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

6.8CVSS8.1AI score0.0162EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2017/04/19 2:00 p.m.•5 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

8.5CVSS0.0162EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2017/04/19 2:00 p.m.•51 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.4AI score0.0162EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2017/04/19 2:00 p.m.•60 views

CVE-2017-7948

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS8.2AI score0.0162EPSS
SaveExploits1
Fedora
Fedora
•added 2017/04/19 7:53 a.m.•39 views

[SECURITY] Fedora 24 Update: ghostscript-9.20-7.fc24

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable Document Format PDF files. Ghostscript translates PostScript code into many...

5.5CVSS1.5AI score0.02386EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/19 12:00 a.m.•8 views

CVE-2017-7948: Integer Overflow or Wraparound

Integer overflow in the markcurve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds write and application crash or possibly have unspecified other impact via a crafted PostScript document...

7.8CVSS7.5AI score0.0162EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2017/04/14 6:59 p.m.•9 views

DEBIAN-CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

7.8CVSS8AI score0.03212EPSS
SaveExploits0References1
Prion
Prion
•added 2017/04/14 6:59 p.m.•26 views

Design/Logic Flaw

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

6.8CVSS8.3AI score0.03212EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
•added 2017/04/14 6:00 p.m.•48 views

CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

7.8CVSS9.2AI score0.03212EPSS
SaveExploits0
Mend
Mend
•added 2017/04/14 6:00 p.m.•7 views

CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack...

8.5CVSS0.03212EPSS
SaveExploits0References14
CVE
CVE
•added 2017/04/14 6:00 p.m.•128 views

CVE-2016-8602

The CVE-2016-8602 issue affects Ghostscript before 9.21, where the .sethalftone5 function (psi/zht2.c) can be triggered by a crafted PostScript document with an empty operand stack. This could lead to a denial of service (application crash) and, in the worst case, arbitrary code execution. Affect...

7.8CVSS8.9AI score0.03212EPSS
SaveExploits0References11Affected Software1
Rows per page
Query Builder