Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2009-3743

ghostscript: TrueType bytecode intepreter integer overflow or wraparound

Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 6.8% KEV · Not listed
Vendors
Artifex Redhat
Products
Afpl Ghostscript Ghostscript Fonts Gpl Ghostscript and 1 more
CVE-2009-4897

ghostscript: long name buffer overflow (GS 8.64)

Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.

CVSS 2.0 · 9.3 Critical EPSS 6.6% KEV · Not listed
Vendors
Artifex
Products
Afpl Ghostscript Ghostscript Fonts Gpl Ghostscript
CVE-2010-2055

ghostscript: gs_init.ps searched in current directory despite -P-

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Artifex Redhat
Products
Afpl Ghostscript Ghostscript Fonts Gpl Ghostscript and 1 more
CVE-2010-4054

ghostscript: glyph data access improper input validation

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Artifex Redhat
Products
Afpl Ghostscript Ghostscript Fonts Gpl Ghostscript and 1 more