Ghostscript vulnerability

2014-12-0800:00:00

ubuntu.com

6.6 Medium

AI Score

Confidence

Low

0.457 Medium

EPSS

Percentile

97.4%

JSON

Releases

Ubuntu 10.04

Packages

ghostscript - PostScript and PDF interpreter

Details

USN-2434-1 fixed a vulnerability in JasPer. This update provides the
corresponding fix for the JasPer library embedded in the Ghostscript
package.

Original advisory details:

Jose Duart discovered that JasPer incorrectly handled certain malformed
JPEG-2000 image files. If a user were tricked into opening a specially
crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash
or possibly execute arbitrary code with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu10.04noarchlibgs8< 8.71.dfsg.1-0ubuntu5.6UNKNOWN
Ubuntu10.04noarchghostscript< 8.71.dfsg.1-0ubuntu5.6UNKNOWN
Ubuntu10.04noarchghostscript-cups< 8.71.dfsg.1-0ubuntu5.6UNKNOWN
Ubuntu10.04noarchghostscript-x< 8.71.dfsg.1-0ubuntu5.6UNKNOWN
Ubuntu10.04noarchlibgs-dev< 8.71.dfsg.1-0ubuntu5.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	10.04	noarch	libgs8	< 8.71.dfsg.1-0ubuntu5.6	UNKNOWN
Ubuntu	10.04	noarch	ghostscript	< 8.71.dfsg.1-0ubuntu5.6	UNKNOWN
Ubuntu	10.04	noarch	ghostscript-cups	< 8.71.dfsg.1-0ubuntu5.6	UNKNOWN
Ubuntu	10.04	noarch	ghostscript-x	< 8.71.dfsg.1-0ubuntu5.6	UNKNOWN
Ubuntu	10.04	noarch	libgs-dev	< 8.71.dfsg.1-0ubuntu5.6	UNKNOWN