Artifex Ghostscript 9.56.1

CPE Details

Artifex Ghostscript 9.56.1
artifex
ghostscript
9.56.1
2023-08-25
13h39 +00:00
2023-08-25
13h47 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:artifex:ghostscript:9.56.1:*:*:*:*:*:*:*

Informations

Vendor

artifex

Product

ghostscript

Version

9.56.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-46951 2024-11-09 23h00 +00:00 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
7.8
High
CVE-2024-46952 2024-11-09 23h00 +00:00 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
8.4
High
CVE-2024-46953 2024-11-09 23h00 +00:00 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.
7.8
High
CVE-2024-46954 2024-11-09 23h00 +00:00 An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
8.4
High
CVE-2024-46955 2024-11-09 23h00 +00:00 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
5.5
Medium
CVE-2024-46956 2024-11-09 23h00 +00:00 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
7.8
High
CVE-2024-29506 2024-07-02 22h00 +00:00 Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
8.8
High
CVE-2024-29508 2024-07-02 22h00 +00:00 Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
3.3
Low
CVE-2024-29509 2024-07-02 22h00 +00:00 Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
8.8
High
CVE-2023-46751 2023-12-05 23h00 +00:00 An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
7.5
High
CVE-2023-43115 2023-09-17 22h00 +00:00 In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).
8.8
High
CVE-2023-38559 2023-08-01 16h49 +00:00 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.
5.5
Medium
CVE-2023-36664 2023-06-24 22h00 +00:00 Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
7.8
High
CVE-2023-28879 2023-03-31 00h00 +00:00 In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.
9.8
Critical