CVE-2024-46952
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
- Update to 10.02.1~dfsg1-0ubuntu7.4
Published Updated
PatchFirst · Latest vulnerabilities
ghostscript vulnerabilities · Page 2
Vulnerabilities published for ghostscript in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 32
CVE-2024-46951
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
- Update to 10.02.1~dfsg1-0ubuntu7.4
Published UpdatedCVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.
- Update to 10.02.1~dfsg1-0ubuntu7.1
Published UpdatedCVE-2024-33870
An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ is permitted.
- Update to 10.02.1~dfsg1-0ubuntu7.1
Published UpdatedCVE-2024-33869
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
- Update to 10.02.1~dfsg1-0ubuntu7.1
Published UpdatedCVE-2024-29511
Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, exploitation can use debug_file /tmp/out and user_patterns_file /etc/passwd.
- Update to 10.02.1~dfsg1-0ubuntu7.3
Published UpdatedCVE-2024-29510
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
- Update to 10.02.1~dfsg1-0ubuntu7.1
Published UpdatedCVE-2024-29509
Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
- Update to 10.02.1~dfsg1-0ubuntu7.3
Published UpdatedCVE-2024-29508
Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
- Update to 10.02.1~dfsg1-0ubuntu7.3
Published UpdatedCVE-2024-29507
Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.
- Update to 10.02.1~dfsg1-0ubuntu7.3
Published UpdatedCVE-2024-29506
Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
- Update to 10.02.1~dfsg1-0ubuntu7.3
Published UpdatedCVE-2023-46751
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
- Update to 10.02.1~dfsg1-0ubuntu1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.