GG
Product
Gpl Ghostscript
16
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 0
Watch
Add Gpl Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18284 | 8.6 | Oct 19 | Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator Affected: before 9.26 |
| CVE-2018-16513 | 7.8 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have… Affected: before 9.26 |
| CVE-2018-16510 | 7.8 | Sep 5 | An issue was discovered in Artifex Ghostscript before 9.24 Affected: before 9.26 |
| CVE-2018-16509 | 7.8 | Sep 5 | An issue was discovered in Artifex Ghostscript before 9.24 Affected: before 9.26 |
| CVE-2018-15911 | 7.8 | Aug 28 | In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter… Affected: before 9.26 |
| CVE-2018-15910 | 7.8 | Aug 27 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or… Affected: before 9.26 |
| CVE-2018-15909 | 7.8 | Aug 27 | In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the… Affected: before 9.26 |
Showing 7
