167 results · Feed
-
High 7.3
A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not prop…
-
High 7.3CVE-2019-14813 EPSS 11%
A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly s…
-
High 7.3
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not pro…
-
High 7.3CVE-2019-14811 Public exploit
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not proper…
-
Unscored —
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component…
-
High 7.3
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6…
-
High 7.3
It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A special…
-
High 7.3
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A…
-
Unscored —
In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to…
-
Unscored —
In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when…
-
Unscored —
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially craft…
-
Unscored —
psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because…
-
Unscored —
psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of…
-
Unscored —
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions becaus…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked correctly if another device…
-
Unscored —CVE-2018-18284 EPSS 16%
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving th…
-
Unscored —
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operator…
-
Unscored —CVE-2018-17961 Public exploit
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving er…
-
Unscored —
Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers …
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running …
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even t…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checki…
-
Unscored —
In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact.
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter co…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interprete…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attacke…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF prim…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memo…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers a…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempf…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Unscored —
psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow…
-
Unscored —
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.…
-
Unscored —
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparam…
-
Unscored —
psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote atta…
-
Unscored —
The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers …
-
Unscored —
The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to …