Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-3228

Опубликовано: 11 авг. 2015
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:artifex:afpl_ghostscript:*:*:*:*:*:*:*:*
Версия до 9.15 (включая)

EPSS

Процентиль: 76%
0.00967
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
больше 10 лет назад

Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.

redhat
больше 10 лет назад

Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.

debian
больше 10 лет назад

Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc. ...

suse-cvrf
почти 10 лет назад

Security update for ghostscript

suse-cvrf
почти 10 лет назад

Security update for ghostscript

EPSS

Процентиль: 76%
0.00967
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189