Summary
Tavis Ormandy discovered multiple vulnerabilities in the way that Ghostscript
processes certain Postscript files. If a user or automated system were tricked
into opening a specially crafted file, an attacker could cause a denial of
service or possibly execute arbitrary code. (CVE-2016-7976, CVE-2016-7978,
CVE-2016-7979, CVE-2016-8602)
Multiple vulnerabilities were discovered in Ghostscript related to information
disclosure. If a user or automated system were tricked into opening a specially
crafted file, an attacker could expose sensitive data. (CVE-2013-5653,
CVE-2016-7977)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | ghostscript | 9.10~dfsg-0ubuntu10.5 |
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.18~dfsg~0-0ubuntu2.2 |
Vulnerabilities 6
-
Unscored —
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attacker…
-
Unscored —
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparam…
-
Unscored —
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently rea…
-
Unscored —
Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors rel…
-
Unscored —
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently exe…
-
Unscored —
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of servic…