Поиск уязвимостей
Количество 37
Количество 37
CVE-2019-3839
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.
CVE-2019-3839
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.
CVE-2019-3839
It was found that in ghostscript some privileged operators remained ac ...
CVE-2019-3838
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
CVE-2019-3838
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
CVE-2019-3838
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
CVE-2019-3838
It was found that the forceput operator could be extracted from the De ...
GHSA-wxr2-p327-97jr
It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.28 are vulnerable.
ELSA-2019-1017
ELSA-2019-1017: ghostscript security update (IMPORTANT)
BDU:2019-02467
Уязвимость программы конвертирования файлов формата PostScript Ghostscript, связанная с неправильным использованием привилегированных API, позволяющая нарушителю получить доступ к файловой системе в обход ограничений
openSUSE-SU-2019:1121-1
Security update for ghostscript
openSUSE-SU-2019:1119-1
Security update for ghostscript
SUSE-SU-2019:14155-1
Recommended update for ghostscript-library
SUSE-SU-2019:0719-1
Security update for ghostscript
SUSE-SU-2019:0718-1
Security update for ghostscript
GHSA-wvh9-rmg8-crq6
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
BDU:2019-01300
Уязвимость метода DefineResource программы конвертирования файлов Ghostscript, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-3839 It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable. | CVSS3: 7.3 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-3839 It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable. | CVSS3: 7.8 | 2% Низкий | больше 7 лет назад |
| CVE-2019-3839 It was found that in ghostscript some privileged operators remained ac ... | CVSS3: 7.8 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-3838 It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
| CVE-2019-3838 It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. | CVSS3: 7.3 | 2% Низкий | больше 7 лет назад |
| CVE-2019-3838 It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
| CVE-2019-3838 It was found that the forceput operator could be extracted from the De ... | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
| GHSA-wxr2-p327-97jr It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.28 are vulnerable. | CVSS3: 7.8 | 2% Низкий | больше 4 лет назад |
| ELSA-2019-1017 ELSA-2019-1017: ghostscript security update (IMPORTANT) | 2% Низкий | больше 7 лет назад | |
 | BDU:2019-02467 Уязвимость программы конвертирования файлов формата PostScript Ghostscript, связанная с неправильным использованием привилегированных API, позволяющая нарушителю получить доступ к файловой системе в обход ограничений | CVSS3: 7.3 | 2% Низкий | почти 8 лет назад |
 | openSUSE-SU-2019:1121-1 Security update for ghostscript | 2% Низкий | больше 7 лет назад | |
| openSUSE-SU-2019:1119-1 Security update for ghostscript | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:14155-1 Recommended update for ghostscript-library | 2% Низкий | около 7 лет назад | |
| SUSE-SU-2019:0719-1 Security update for ghostscript | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0718-1 Security update for ghostscript | 2% Низкий | больше 7 лет назад | |
| GHSA-wvh9-rmg8-crq6 It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. | CVSS3: 5.5 | 2% Низкий | больше 4 лет назад |
| BDU:2019-01300 Уязвимость метода DefineResource программы конвертирования файлов Ghostscript, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.3 | 2% Низкий | больше 7 лет назад |
Уязвимостей на страницу