artifex ghostscript 9.53.3 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript in...

Artifex Ghostscript 9.52 Artifex Ghostscript 9.50 Artifex Ghostscript 9.53.3 Artifex Ghostscript 9.54.0 Fedoraproject Fedora 34

1 Github repository

4.3

CVSSv2

Ghostscript GhostPDL 9.50 up to and including 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).

Artifex Ghostscript Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

NA

In Artifex Ghostscript up to and including 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte ...

Artifex Ghostscript Debian Debian Linux 10.0 Debian Debian Linux 11.0

4.3

CVSSv2

Ghostscript GhostPDL 9.50 up to and including 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp).

Artifex Ghostscript Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

NA

Artifex Ghostscript up to and including 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

Artifex Ghostscript Debian Debian Linux 11.0 Debian Debian Linux 12.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38

5 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook