ghostscript vulnerabilities (openSUSE)
98 vulnerabilities.
ghostscriptopenSUSEIt was found that in ghostscript some privileged operators remained accessible from various...7.3 HighghostscriptopenSUSEIt was found that the forceput operator could be extracted from the DefineResource method in...7.3 HighghostscriptopenSUSEIt was found that the superexec operator was available in the internal dictionary in ghostscript...7.3 HighghostscriptopenSUSEIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...7.8 HighghostscriptopenSUSEpsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 HighghostscriptopenSUSEpsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...7.8 HighghostscriptopenSUSEpsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...7.8 HighghostscriptopenSUSEAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...9.8 CriticalghostscriptopenSUSEArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...8.6 HighghostscriptopenSUSEArtifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging...6.3 MediumghostscriptopenSUSEArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...8.6 HighghostscriptopenSUSEArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...7.8 HighghostscriptopenSUSEAn issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege"...7.8 HighghostscriptopenSUSE** DISPUTED ** An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 MediumghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 MediumghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...5.5 MediumghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...7.8 HighghostscriptopenSUSEAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...7.8 HighghostscriptopenSUSEAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the ...7.8 HighghostscriptopenSUSEAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...7.8 HighghostscriptopenSUSEIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...7.8 HighghostscriptopenSUSEThe set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex...7.8 HighghostscriptopenSUSEIn OpenJPEG 2.3.0, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...5.5 MediumghostscriptopenSUSElibjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer...6.5 MediumghostscriptopenSUSEArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...7.8 HighghostscriptopenSUSEThe pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in...5.5 MediumghostscriptopenSUSEThe mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20...5.5 MediumghostscriptopenSUSEThe fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9...7.8 HighghostscriptopenSUSEThe gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20...5.5 MediumghostscriptopenSUSEThe intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote...5.5 MediumghostscriptopenSUSEThe pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows...5.5 MediumghostscriptopenSUSEThe mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote...5.5 MediumghostscriptopenSUSEThe .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to...7.8 HighghostscriptopenSUSEGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...9.8 CriticalghostscriptopenSUSEUse-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute...9.8 CriticalghostscriptopenSUSEGhostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection...5.5 MediumghostscriptopenSUSEThe PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code...8.8 HighghostscriptopenSUSEInteger overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and...6.8 MediumghostscriptopenSUSEThe getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which...5.5 Medium