ghostscript-doc vulnerabilities (Red Hat)
97 vulnerabilities.
ghostscript-docRed HatA flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure...7.3 Highghostscript-docRed HatA flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure...7.3 Highghostscript-docRed HatIt was found that the .buildfont1 procedure did not properly secure its privileged calls,...7.3 Highghostscript-docRed HatIt was found that in ghostscript some privileged operators remained accessible from various...7.3 Highghostscript-docRed HatIt was found that the forceput operator could be extracted from the DefineResource method in...7.3 Highghostscript-docRed HatIt was found that the superexec operator was available in the internal dictionary in ghostscript...7.3 Highghostscript-docRed HatIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...7.8 Highghostscript-docRed HatIt was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly...7.3 Highghostscript-docRed HatIn Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain...7.8 Highghostscript-docRed Hatpsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 Highghostscript-docRed Hatpsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...7.8 Highghostscript-docRed Hatpsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 Highghostscript-docRed HatAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...9.8 Criticalghostscript-docRed HatArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...8.6 Highghostscript-docRed HatArtifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging...6.3 Mediumghostscript-docRed HatArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...8.6 Highghostscript-docRed HatArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...7.8 Highghostscript-docRed HatAn issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege"...7.8 Highghostscript-docRed HatIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 Mediumghostscript-docRed HatIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 Mediumghostscript-docRed HatIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...7.8 Highghostscript-docRed HatIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 Mediumghostscript-docRed HatAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...7.8 Highghostscript-docRed HatAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...7.8 Highghostscript-docRed HatIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...7.8 Highghostscript-docRed HatIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...7.8 Highghostscript-docRed HatIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...7.8 Highghostscript-docRed HatIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...7.8 Highghostscript-docRed Hatpsi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is...5.3 Mediumghostscript-docRed HatThe set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex...7.8 Highghostscript-docRed HatArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...7.8 Highghostscript-docRed HatThe mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote...5.5 Mediumghostscript-docRed HatThe .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to...7.8 Highghostscript-docRed HatGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...9.8 Criticalghostscript-docRed HatUse-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute...9.8 Criticalghostscript-docRed HatGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...5.5 Mediumghostscript-docRed HatRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...7.5 Highghostscript-docRed HatRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...2.1 Lowghostscript-docRed HatUntrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary...4.4 Mediumghostscript-docRed HatJenkins Cross-Site Request Forgery vulnerabilities6.8 Mediumghostscript-docRed HatJenkins vulnerable to Cross-site Scripting2.1 Lowghostscript-docRed HatThe getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which...5.5 Mediumghostscript-docRed HatCross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in...4.3 Mediumghostscript-docRed HatMultiple integer underflows in the icmLut_allocate function in International Color Consortium ...6.8 Mediumghostscript-docRed HatThe gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of...4.3 Mediumghostscript-docRed HatOff-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript...9.3 Highghostscript-docRed HatGhostscript 8.71 and earlier reads initialization files from the current working directory, which...7.2 High