Red Hat Security AdvisoryRHSA-2012:0096
ghostscript security update
Released 2012-02-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 ghostscript-7.07-33.13.el4, ghostscript-7.07-33.13.el4.i386, ghostscript-7.07-33.13.el4.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 ghostscript-7.07-33.13.el4, ghostscript-7.07-33.13.el4.i386, ghostscript-devel-7.07-33.13.el4 +3
- Red Hat Enterprise Linux ES version 4 ghostscript-7.07-33.13.el4, ghostscript-7.07-33.13.el4.i386, ghostscript-7.07-33.13.el4.ia64 +6
- Red Hat Enterprise Linux WS version 4 ghostscript-7.07-33.13.el4, ghostscript-7.07-33.13.el4.i386, ghostscript-7.07-33.13.el4.ia64 +6
Fixes 2 records
Priority LOW 25
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02609 · Published 2010-10-22 · Fixed CWE-119
Priority LOW 21
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vul…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00471 · Published 2014-10-27 · Fixed CWE-94
