Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 12

Количество 12

fstec логотип

BDU:2019-03227

почти 7 лет назад

Уязвимость процедуры setsystemparams программы конвертирования файлов формата PostScript Ghostscript, позволяющая нарушителю выполнить произвольные команды или получить доступ к файловой системе

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2019-14813

почти 7 лет назад

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 9.8
EPSS: Средний
redhat логотип

CVE-2019-14813

почти 7 лет назад

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 7.3
EPSS: Средний
nvd логотип

CVE-2019-14813

почти 7 лет назад

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2019-14813

почти 7 лет назад

A flaw was found in ghostscript, versions 9.x before 9.50, in the sets ...

CVSS3: 9.8
EPSS: Средний
github логотип

GHSA-r3w6-mj6m-w4m6

около 4 лет назад

A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

EPSS: Средний
oracle-oval логотип

ELSA-2019-2591

почти 7 лет назад

ELSA-2019-2591: ghostscript security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2019-2586

почти 7 лет назад

ELSA-2019-2586: ghostscript security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2223-1

почти 7 лет назад

Security update for ghostscript

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2019:2222-1

почти 7 лет назад

Security update for ghostscript

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2478-1

почти 7 лет назад

Security update for ghostscript

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2019:2460-1

почти 7 лет назад

Security update for ghostscript

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2019-03227

Уязвимость процедуры setsystemparams программы конвертирования файлов формата PostScript Ghostscript, позволяющая нарушителю выполнить произвольные команды или получить доступ к файловой системе

CVSS3: 9.8
11%
Средний
почти 7 лет назад
ubuntu логотип
CVE-2019-14813

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 9.8
11%
Средний
почти 7 лет назад
redhat логотип
CVE-2019-14813

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 7.3
11%
Средний
почти 7 лет назад
nvd логотип
CVE-2019-14813

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

CVSS3: 9.8
11%
Средний
почти 7 лет назад
debian логотип
CVE-2019-14813

A flaw was found in ghostscript, versions 9.x before 9.50, in the sets ...

CVSS3: 9.8
11%
Средний
почти 7 лет назад
github логотип
GHSA-r3w6-mj6m-w4m6

A flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.

11%
Средний
около 4 лет назад
oracle-oval логотип
ELSA-2019-2591

ELSA-2019-2591: ghostscript security update (IMPORTANT)

почти 7 лет назад
oracle-oval логотип
ELSA-2019-2586

ELSA-2019-2586: ghostscript security update (IMPORTANT)

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2223-1

Security update for ghostscript

почти 7 лет назад
suse-cvrf логотип
openSUSE-SU-2019:2222-1

Security update for ghostscript

почти 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:2478-1

Security update for ghostscript

почти 7 лет назад
suse-cvrf логотип
SUSE-SU-2019:2460-1

Security update for ghostscript

почти 7 лет назад

Уязвимостей на страницу

exploitDog - Комплексное решение для обнаружения, оценки и устранения уязвимостей.