Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 146

Export CSV
CVE-2017-9620

ghostscript: Heap-buffer over-read in the xps_select_font_encoding function

The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Artifex
Products
Ghostscript Ghostxps
CVE-2016-7979

ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.

CVSS 3.0 · 9.8 Critical EPSS 6.4% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux
CVE-2017-9619

ghostscript: Segmentation fault in the xps_true_callback_glyph_name function

The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentation Violation and application crash) via a crafted file.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Artifex
Products
Ghostscript Ghostxps
CVE-2017-9618

ghostscript: Buffer overflow in the xps_load_sfnt_name function

The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted document.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Artifex
Products
Ghostscript Ghostxps
CVE-2016-7978

ghostscript: reference leak in .setdevice allows use-after-free and remote code execution

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux
CVE-2017-9612

ghostscript: Use-after-free in the Ins_IP function

The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Artifex Debian
Products
Ghostscript Ghostxps Debian Linux
CVE-2016-10218

ghostscript: NULL pointer dereference in the pfd14_pop_transparency_group function

The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2017-9611

ghostscript: Heap-buffer over-read in the Ins_MIRP function

The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Artifex Debian
Products
Ghostscript Debian Linux
CVE-2016-7977

ghostscript: .libfile does not honor -dSAFER

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.

CVSS 3.0 · 5.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux
CVE-2017-9610

ghostscript: Heap-buffer over-read in the xps_load_sfnt_name function

The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Artifex
Products
Ghostscript Ghostxps
CVE-2017-8908

ghostscript: Out-of-bounds read in mark_line_tr function

The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2016-7976

ghostscript: various userparams allow %pipe% in paths, allowing remote shell

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.

CVSS 3.0 · 8.8 High EPSS 23.5% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2016-10217

ghostscript: Use-after-free in the pdf14_open function

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2017-7948

ghostscript: Integer overflow in the mark_curve function

Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2016-10317

ghostscript: Heap-buffer overflow in the fill_threshold_buffer function

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2017-7207

ghostscript: NULL pointer dereference in mem_get_bits_rectangle()

The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.

CVSS 3.0 · 5.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux
CVE-2017-5951

ghostscript: NULL pointer dereference in the mem_get_bits_rectangle function

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2016-10220

ghostscript: NULL pointer dereference in the gs_makewordimagedevice function

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Artifex
Products
Ghostscript
CVE-2017-9835

ghostscript: Heap-buffer over-read in the gs_alloc_ref_array function

The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer overflow check in base/gsalloc.c.

CVSS 3.0 · 7.8 High EPSS 2.8% KEV · Not listed
Vendors
Artifex Debian
Products
Ghostscript Debian Linux
CVE-2024-33869

ghostscript: path traversal and command execution due to path reduction

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux Rhel Eus