Lucene search
K

2744 matches found

OSV
OSV
added 2023/09/18 8:15 a.m.34 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.2AI score
Exploits0References5
OSV
OSV
added 2023/09/18 8:15 a.m.1 views

DEBIAN-CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.7AI score0.21677EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/18 8:15 a.m.1 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS7.8AI score0.21677EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2023/09/18 8:15 a.m.40 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS7.6AI score0.21677EPSS
Exploits0References3
OSV
OSV
added 2023/09/18 8:15 a.m.0 views

UBUNTU-CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS6.4AI score0.21677EPSS
Exploits0References4
Prion
Prion
added 2023/09/18 8:15 a.m.17 views

Remote code execution

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

6.8CVSS9.6AI score0.21677EPSS
Exploits0References5Affected Software2
CNNVD
CNNVD
added 2023/09/18 12:0 a.m.1 views

Artifex Software Ghostscript Security Vulnerability

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

8.8CVSS7.7AI score0.21677EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2023/09/18 12:0 a.m.2 views

PT-2023-5662

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 10.01.2 and earlier Description The issue is related to the gdevijs.c component in GhostPDL, which can lead to remote code execution via crafted PostScript documents. This is because the documents can switch to the...

10CVSS7.8AI score0.21677EPSS
Exploits0References62
Debian CVE
Debian CVE
added 2023/09/18 12:0 a.m.52 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.6AI score0.21677EPSS
Exploits0
CVE
CVE
added 2023/09/18 12:0 a.m.747 views

CVE-2023-43115

Ghostscript/GhostPDL (gdevijs.c) vulnerability (CVE-2023-43115) allows remote code execution via crafted PostScript documents after SAFER is activated, by switching to the IJS device or altering the IjsServer parameter. Affected are Ghostscript versions up to 10.01.2; the issue can be triggered w...

8.8CVSS8.8AI score0.21677EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2023/09/18 12:0 a.m.42 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.1AI score0.21677EPSS
Exploits0
Cvelist
Cvelist
added 2023/09/18 12:0 a.m.20 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

9.2AI score0.21677EPSS
Exploits0References5
Gentoo Linux
Gentoo Linux
added 2023/09/17 12:0 a.m.54 views

GPL Ghostscript: Multiple Vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...

9.8CVSS7.4AI score0.30764EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2023/09/17 12:0 a.m.35 views

GLSA-202309-03 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-03 GPL Ghostscript: Multiple Vulnerabilities - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it...

9.8CVSS7.4AI score0.30764EPSS
Exploits5References6
OSV
OSV
added 2023/09/09 11:5 a.m.1 views

OESA-2023-1607 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal...

9.8CVSS6.8AI score0.30764EPSS
Exploits4References4
CNNVD
CNNVD
added 2023/08/23 12:0 a.m.1 views

Ghostscript 缓冲区错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print Postscript files on non-Postscript...

5.5CVSS6.5AI score0.00474EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.1 views

Artifex Software Ghostscript 数字错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

5.5CVSS5.9AI score0.00375EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/08/14 12:0 a.m.16 views

Fedora: Security Advisory for ghostscript (FEDORA-2023-cba4a3a00f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00016EPSS
Exploits0References2
CNVD
CNVD
added 2023/08/08 12:0 a.m.17 views

HTMLDOC buffer overflow vulnerability (CNVD-2023-67081)

HTMLDOC is an open source program that can convert HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. HTMLDOC version 1.9.12 suffers from a buffer overflow vulnerability that stems from an out-of-bounds flaw found in the parsetree function of toc.cxx, which results in the...

4.4CVSS7.7AI score0.00031EPSS
Exploits1Affected Software1
Debian
Debian
added 2023/08/07 2:6 p.m.23 views

[SECURITY] [DLA 3519-1] ghostscript security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3519-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 07, 2023 https://wiki.debian.org/LTS -...

5.5CVSS6.1AI score0.00016EPSS
Exploits0
Rows per page
Query Builder