aladdin enterprises ghostscript 5.10cl vulnerabilities and exploits

(subscribe to this query)

409

VMScore

ghostscript prior to 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscri...

Aladdin Enterprises Ghostscript 5.10cl Aladdin Enterprises Ghostscript 5.50 Aladdin Enterprises Ghostscript 5.10.10 Aladdin Enterprises Ghostscript 5.10.15 Aladdin Enterprises Ghostscript 4.3

641

VMScore

The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 up to and including 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.

Aladdin Enterprises Ghostscript 4.3.2 Aladdin Enterprises Ghostscript 5.10.10 Aladdin Enterprises Ghostscript 5.10cl Aladdin Enterprises Ghostscript 5.50 Aladdin Enterprises Ghostscript 7.0.5 Aladdin Enterprises Ghostscript 7.0.6 Aladdin Enterprises Ghostscript 5.10.10 1 Aladdin Enterprises Ghostscript 5.50.8 Aladdin Enterprises Ghostscript 5.50.8 7 Aladdin Enterprises Ghostscript 7.0.7 Aladdin Enterprises Ghostscript 5.10.12cl Aladdin Enterprises Ghostscript 6.51 Aladdin Enterprises Ghostscript 6.52 Aladdin Enterprises Ghostscript 4.3 Aladdin Enterprises Ghostscript 5.10.15 Aladdin Enterprises Ghostscript 5.10.16 Aladdin Enterprises Ghostscript 6.53 Aladdin Enterprises Ghostscript 7.0.4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook