GG
Product
Gpl Ghostscript
16
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 0
Watch
Add Gpl Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18284 | 8.6 | Oct 19 | Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator Affected: before 9.26 |
| CVE-2018-16513 | 7.8 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have… Affected: before 9.26 |
| CVE-2018-16510 | 7.8 | Sep 5 | An issue was discovered in Artifex Ghostscript before 9.24 Affected: before 9.26 |
| CVE-2018-16509 | 7.8 | Sep 5 | An issue was discovered in Artifex Ghostscript before 9.24 Affected: before 9.26 |
| CVE-2018-15911 | 7.8 | Aug 28 | In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter… Affected: before 9.26 |
| CVE-2018-15910 | 7.8 | Aug 27 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or… Affected: before 9.26 |
| CVE-2018-15909 | 7.8 | Aug 27 | In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the… Affected: before 9.26 |
| CVE-2016-9601 | 5.5 | Apr 24 | ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode… Affected: before 9.21 |
| CVE-2013-6629 | – | Nov 19 | The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not… Affected: before 9.03 |
| CVE-2012-4875 | – | Sep 6 | Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via… Affected: 9.04 |
| CVE-2010-4054 | – | Oct 23 | The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in… Affected: 8.01; 8.15; 8.50; 8.51; 8.54; 8.56; +8 more |
| CVE-2009-3743 | – | Aug 26 | Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of… Affected: through 8.70; 8.01; 8.15; 8.50; 8.51; 8.54; +7 more |
| CVE-2010-2055 | – | Jul 22 | Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse… Affected: through 8.71; 8.01; 8.15; 8.50; 8.51; 8.54; +8 more |
| CVE-2009-4897 | – | Jul 22 | Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted… Affected: through 8.64; 8.01; 8.15; 8.50; 8.51; 8.54; +8 more |
| CVE-2010-1628 | – | May 19 | Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure… Affected: 8.64; 8.70 |
| CVE-2010-1869 | – | May 12 | Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file Affected: 8.64; 8.70 |
Showing 16