Lucene search
K

2744 matches found

OSV
OSV
added 2019/11/27 1:15 p.m.1 views

ALPINE-CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

7.8CVSS7AI score0.00526EPSS
Exploits0References1
Prion
Prion
added 2019/11/27 1:15 p.m.21 views

Authentication flaw

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

6.8CVSS6.9AI score0.00526EPSS
Exploits0References3Affected Software9
AlpineLinux
AlpineLinux
added 2019/11/27 12:10 p.m.37 views

CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

7.8CVSS7.8AI score0.00526EPSS
Exploits0
Cvelist
Cvelist
added 2019/11/27 12:10 p.m.18 views

CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

7.3CVSS7.7AI score0.00526EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2019/11/27 12:10 p.m.38 views

CVE-2019-10216

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of...

7.8CVSS7.6AI score0.00526EPSS
Exploits0
OpenVAS
OpenVAS
added 2019/11/26 12:0 a.m.26 views

Fedora Update for ghostscript FEDORA-2019-7debdd1807

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.4AI score0.60542EPSS
Exploits4References2
OSV
OSV
added 2019/11/21 3:15 p.m.0 views

CVE-2019-10627

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS...

9.8CVSS7.7AI score
Exploits0References2
NVD
NVD
added 2019/11/21 3:15 p.m.11 views

CVE-2019-10627

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS...

9.8CVSS9.7AI score0.0056EPSS
Exploits0References2
Prion
Prion
added 2019/11/21 3:15 p.m.9 views

Integer overflow

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS...

7.5CVSS9.6AI score0.0056EPSS
Exploits0References2Affected Software42
Cvelist
Cvelist
added 2019/11/21 2:38 p.m.14 views

CVE-2019-10627

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS...

9.8AI score0.0056EPSS
Exploits0References2
CVE
CVE
added 2019/11/21 2:38 p.m.59 views

CVE-2019-10627

CVE-2019-10627 is an integer overflow to buffer overflow in PostScript image handling used by PostScript- and PDF-compatible interpreters in IPS-based HP Inkjet printers prior to 2019.2. The root cause is incorrect buffer size calculation, enabling a vulnerability that can overflow buffers in aff...

9.8CVSS9.6AI score0.0056EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/11/21 12:0 a.m.43 views

openSUSE Security Update : ghostscript (openSUSE-2019-2535)

This update for ghostscript fixes the following issues : - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. This update was imported from the SUSE:SLE-15:Update update project. C Tenable...

8.8CVSS7.5AI score0.00503EPSS
Exploits0References2
OSV
OSV
added 2019/11/20 1:27 p.m.3 views

OPENSUSE-SU-2019:2535-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. This update was imported from the SUSE:SLE-15:Update update project...

8.8CVSS8.8AI score0.00503EPSS
Exploits0References3
OSV
OSV
added 2019/11/19 10:15 p.m.7 views

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS6.5AI score0.00126EPSS
Exploits0References8
NVD
NVD
added 2019/11/19 10:15 p.m.17 views

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS5.3AI score0.00126EPSS
Exploits0References6
OSV
OSV
added 2019/11/19 10:15 p.m.1 views

DEBIAN-CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS7.2AI score0.00126EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2019/11/19 10:15 p.m.24 views

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS6.9AI score0.00126EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/11/19 9:20 p.m.25 views

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS7.2AI score0.00126EPSS
Exploits0
CVE
CVE
added 2019/11/19 9:20 p.m.93 views

CVE-2011-2924

CVE-2011-2924 affects the foomatic-rip filter (v4.0.12 and earlier). The flaw arises from insecure temporary file handling when rendering PostScript data in debug mode, enabling a local attacker to perform symlink attacks to overwrite arbitrary files accessible to the user running the foomatic-ri...

5.5CVSS5.2AI score0.00126EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2019/11/19 9:15 p.m.1 views

DEBIAN-CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

5.5CVSS7.2AI score0.0019EPSS
Exploits0References1
Rows per page
Query Builder