Ghostscript - vulnerabilities (CVEs)
13 CVEs in 1 products, 0 in the last 30 days, newest from 2024-07-03.
Products
- Ghostscript - 11 CVEs
Newest CVEs of Ghostscript
- CVE-2024-29510 - CVSS 6.3 (medium), 2024-07-03: Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
- CVE-2019-10216 - CVSS 7.8 (high), 2019-11-27: In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.…
- CVE-2019-14869 - CVSS 8.8 (high), 2019-11-15: A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls,…
- CVE-2010-4820 - CVSS 4.4 (medium), 2014-10-27: Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in…
- CVE-2012-4405 - CVSS 6.8 (medium), 2012-09-18: Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and…
- CVE-2009-4270 - CVSS 9.3 (critical), 2009-12-21: Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service…
- CVE-2009-0196 - CVSS 9.3 (critical), 2009-04-16: Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and…
- CVE-2009-0792 - CVSS 9.3 (critical), 2009-04-14: Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and…
- CVE-2008-6679 - CVSS 5 (medium), 2009-04-08: Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf…
- CVE-2007-6725 - CVSS 7.5 (high), 2009-04-08: The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly…
- CVE-2009-0584 - CVSS 9.3 (critical), 2009-03-23: icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System…
- CVE-2009-0583 - CVSS 9.3 (critical), 2009-03-23: Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and…
- CVE-2008-0411 - CVSS 6.8 (medium), 2008-02-28: Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a…
