Lucene search
+L

2834 matches found

OSV
OSV
added 2023/09/18 8:15 a.m.41 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.2AI score
SaveExploits0References5
Prion
Prion
added 2023/09/18 8:15 a.m.25 views

Remote code execution

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

6.8CVSS9.6AI score0.0468EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2023/09/18 8:15 a.m.49 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS7.6AI score0.0468EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/18 8:15 a.m.11 views

UBUNTU-CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS6.4AI score0.0468EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/18 12:0 a.m.7 views

Artifex Software Ghostscript Security Vulnerability

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

8.8CVSS7.7AI score0.0468EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/09/18 12:0 a.m.6 views

PT-2023-5662

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions 10.01.2 and earlier Description The issue is related to the gdevijs.c component in GhostPDL, which can lead to remote code execution via crafted PostScript documents. This is because the documents can switch to the...

10CVSS7.8AI score0.0468EPSS
SaveExploits0References63
CVE
CVE
added 2023/09/18 12:0 a.m.775 views

CVE-2023-43115

Ghostscript/GhostPDL (gdevijs.c) vulnerability (CVE-2023-43115) allows remote code execution via crafted PostScript documents after SAFER is activated, by switching to the IJS device or altering the IjsServer parameter. Affected are Ghostscript versions up to 10.01.2; the issue can be triggered w...

8.8CVSS8.8AI score0.0468EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2023/09/18 12:0 a.m.70 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.6AI score0.0468EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2023/09/18 12:0 a.m.68 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

8.8CVSS8.1AI score0.0468EPSS
SaveExploits0
Cvelist
Cvelist
added 2023/09/18 12:0 a.m.28 views

CVE-2023-43115

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be...

9.2AI score0.0468EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/09/17 12:0 a.m.38 views

GLSA-202309-03 : GPL Ghostscript: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-03 GPL Ghostscript: Multiple Vulnerabilities - A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it...

9.8CVSS7.4AI score0.06341EPSS
SaveExploits6References6
Gentoo Linux
Gentoo Linux
added 2023/09/17 12:0 a.m.61 views

GPL Ghostscript: Multiple Vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...

9.8CVSS7.4AI score0.06341EPSS
SaveExploits6
OSV
OSV
added 2023/09/09 11:5 a.m.4 views

OESA-2023-1607 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal...

9.8CVSS6.8AI score0.06341EPSS
SaveExploits5References4
CNNVD
CNNVD
added 2023/08/23 12:0 a.m.7 views

Ghostscript 缓冲区错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files and print Postscript files on non-Postscript...

5.5CVSS6.5AI score0.02252EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.6 views

Artifex Software Ghostscript 数字错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

5.5CVSS5.9AI score0.00619EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2023/08/14 12:0 a.m.18 views

Fedora: Security Advisory for ghostscript (FEDORA-2023-cba4a3a00f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00435EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/08/08 12:0 a.m.47 views

HTMLDOC buffer overflow vulnerability (CNVD-2023-67081)

HTMLDOC is an open source program that can convert HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. HTMLDOC version 1.9.12 suffers from a buffer overflow vulnerability that stems from an out-of-bounds flaw found in the parsetree function of toc.cxx, which results in the...

4.4CVSS7.7AI score0.00336EPSS
SaveExploits1Affected Software1
Debian
Debian
added 2023/08/07 2:6 p.m.35 views

[SECURITY] [DLA 3519-1] ghostscript security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3519-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 07, 2023 https://wiki.debian.org/LTS -...

5.5CVSS6.1AI score0.00435EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/07/27 12:0 a.m.8 views

PT-2023-5738 · Cups +7 · Cups +7

Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 2.4.7 Description: The issue is related to a failure in validating the length provided by an attacker-crafted PPD PostScript document, making CUPS and libppd susceptible to a heap-based buffer overflow and possibly code...

7.5CVSS7.1AI score0.01461EPSS
SaveExploits4References93
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.8 views

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer drivers for Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PostScript Printer Driver PScript and PCL6 Class Printer drivers for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.0052EPSS
SaveExploits0References4
Rows per page
Query Builder