Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-27792

Опубликовано: 19 авг. 2022
Источник: nvd
CVSS3: 7.1
EPSS Низкий

Описание

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
Версия до 9.50 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 9%
0.00036
Низкий

7.1 High

CVSS3

Дефекты

CWE-119
CWE-119

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 3 года назад

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

CVSS3: 7.1
redhat
больше 5 лет назад

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

CVSS3: 7.1
debian
почти 3 года назад

A heap-based buffer overwrite vulnerability was found in GhostScript's ...

CVSS3: 7.1
github
почти 3 года назад

A heap-based buffer over write vulnerability was found in GhostScript's lp8000_print_page() function in gdevlp8k.c file. An attacker could trick a user to open a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.

CVSS3: 7.1
fstec
больше 5 лет назад

Уязвимость функции lp8000_print_page() компонента gdevlp8k.c набора программного обеспечения обработки документов Ghostscript, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании

EPSS

Процентиль: 9%
0.00036
Низкий

7.1 High

CVSS3

Дефекты

CWE-119
CWE-119