Red Hat Security AdvisoryRHSA-2012:0095
ghostscript security update
Released 2012-02-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) ghostscript-8.70-6.el5_7.6, ghostscript-devel-8.70-6.el5_7.6, ghostscript-devel-8.70-6.el5_7.6.i386
- Red Hat Enterprise Linux (v. 5 server) ghostscript-8.70-6.el5_7.6, ghostscript-8.70-6.el5_7.6.i386, ghostscript-8.70-6.el5_7.6.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) ghostscript-8.70-6.el5_7.6, ghostscript-8.70-6.el5_7.6.i386, ghostscript-gtk-8.70-6.el5_7.6 +1
- Red Hat Enterprise Linux Desktop (v. 6) ghostscript-8.70-11.el6_2.6
- Red Hat Enterprise Linux Desktop Optional (v. 6) ghostscript-8.70-11.el6_2.6, ghostscript-devel-8.70-11.el6_2.6, ghostscript-doc-8.70-11.el6_2.6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) ghostscript-8.70-11.el6_2.6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ghostscript-8.70-11.el6_2.6, ghostscript-devel-8.70-11.el6_2.6, ghostscript-doc-8.70-11.el6_2.6 +1
- Red Hat Enterprise Linux Server (v. 6) ghostscript-8.70-11.el6_2.6, ghostscript-8.70-11.el6_2.6.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) ghostscript-8.70-11.el6_2.6, ghostscript-devel-8.70-11.el6_2.6, ghostscript-devel-8.70-11.el6_2.6.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) ghostscript-8.70-11.el6_2.6
- Red Hat Enterprise Linux Workstation Optional (v. 6) ghostscript-8.70-11.el6_2.6, ghostscript-devel-8.70-11.el6_2.6, ghostscript-doc-8.70-11.el6_2.6 +1
Fixes 4 records
Priority MEDIUM 50
Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a ma…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06755 · Published 2010-08-26 · Fixed CWE-189
Priority LOW 32
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00505 · Published 2010-07-22 · Fixed CWE-17
Priority LOW 25
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02609 · Published 2010-10-22 · Fixed CWE-119
Priority LOW 21
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vul…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00471 · Published 2014-10-27 · Fixed CWE-94
THREATIST.IORead the docs