Lucene search
K

2744 matches found

Veracode
Veracode
added 2019/05/16 3:23 a.m.27 views

Denial Of Service (DoS)

Artifex Ghostscript is vulnerable to denial of serviceDoS attacks. This is because the setpattern operator does not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or possibly execute arbitrary code in the context of the Ghostscript...

7.8CVSS8.8AI score0.0131EPSS
Exploits1References10Affected Software1
Veracode
Veracode
added 2019/05/16 3:23 a.m.21 views

Denial Of Service (DoS)

Ghostscript is vulnerable to denial of serviceDoS attacks. This is because the ghostscript device cleanup does not properly handle devices replaced with a null device. An attacker could possibly exploit this to bypass the -dSAFER protection and crash ghostscript or possibly execute arbitrary code...

5.5CVSS7.1AI score0.00454EPSS
Exploits0References11Affected Software1
Veracode
Veracode
added 2019/05/16 3:23 a.m.27 views

Arbitrary Code Execution

Artifex Ghostscript is vulnerable to arbitrary code execution. This is because incorrect restoration of privilege checking when running out of stack during exception handling. An attacker could use this flaw to supply crafted PostScript to execute code using the pipe instruction...

7.8CVSS8AI score0.00971EPSS
Exploits3References15Affected Software1
Veracode
Veracode
added 2019/05/16 3:23 a.m.17 views

Arbitrary Code Execution

Artifex Ghostscript is vulnerable to arbitrary code execution. This is because artifex ghoscript allows an user-writable error exception table. An attacker could use this flaw to supply crafted PostScript to potentially overwrite or replace error handlers to inject code...

7.8CVSS8.8AI score0.00351EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2019/05/16 3:22 a.m.29 views

Denial Of Service (DoS)

Ghostscript is vulnerable to denial of service DoS attacks. This is because the .type operator does not properly validate its operands. A remote attacker could supply crafted PostScript to crash the interpreter impacting the availability...

7.8CVSS7.2AI score0.00371EPSS
Exploits0References11Affected Software1
Veracode
Veracode
added 2019/05/16 3:22 a.m.24 views

Information Disclosure

Ghostscript is vulnerable to information disclosure vulnerability. This is because the ghostscript does not properly restrict access to files open prior to enabling the -dSAFER mode. An attacker could disclose the content of affected files via a specially crafted PostScript document...

5.5CVSS5.9AI score0.00352EPSS
Exploits0References10Affected Software1
Veracode
Veracode
added 2019/05/16 3:22 a.m.26 views

Denial Of Service (DoS) Or Remote Code Execution (RCE)

Ghostscript is vulnerable to denial of service DoS attacks. This is because the ghostscript .shfill operator did not properly validate certain types. An attacker could supply crafted PostScript files to crash the interpreter or potentially execute arbitrary code in ghostscript context...

7.8CVSS7.8AI score0.02086EPSS
Exploits0References14Affected Software1
Veracode
Veracode
added 2019/05/16 2:25 a.m.29 views

Code Injection

pdfjs-dist is vulnerable to code injection vulnerability. This is because it does not sufficiently sanitize PostScript calculator functions which allows an attacker to inject malicious JavaScript through a crafted PDF file...

8.8CVSS9.2AI score0.43031EPSS
Exploits0References14Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.22 views

Adobe Acrobat Pro DC PostScript colorimage Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.7AI score0.10972EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.14 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.09253EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.23 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.0615EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.23 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.0615EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.20 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.7AI score0.11716EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.22 views

Adobe Acrobat Pro DC PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.5AI score0.09253EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.21 views

Adobe Acrobat Pro DC PostScript JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.5AI score0.09253EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.20 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.0615EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.27 views

Adobe Acrobat Pro DC JPEG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.8AI score0.06934EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.18 views

Adobe Acrobat Pro DC PostScript File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS3.2AI score0.05799EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.23 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.4AI score0.09253EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/05/15 12:0 a.m.24 views

Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS3.3AI score0.0615EPSS
Exploits0References1
Rows per page
Query Builder