Artifex

Records266All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical31CVSS 9.0–10.0

CVSS high121CVSS 7.0–8.9

Exploited now

Artifex records in CISA KEV

TI-2017-05861 Artifex Ghostscript Type Confusion Vulnerability CRITICAL 93KEV 2022-05-24

Components

Products in the NVD configurations · select one to filter the records

Ghostscript 129 records CRITICAL Mupdf 67 records HIGH Mujs 30 records HIGH Gpl Ghostscript 16 records HIGH Ghostscript Ghostxps 9 records LOW Afpl Ghostscript 7 records MEDIUM Jbig2dec 7 records MEDIUM Ghostscript Fonts 4 records MEDIUM

Records

4 records in Ghostscript Fonts · all components

TI-2009-04653 CVE-2009-4897 · GHSA-53pw-2446-9fc8

Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers…

MEDIUM 50

Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document containing a long name.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06629 Published 2010-07-22 No fix listed CWE-119

TI-2009-03564 CVE-2009-3743 · GHSA-3p47-jqhp-gxp9

Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in…

MEDIUM 50

Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a ma…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06755 Published 2010-08-26 Fixed CWE-189

TI-2010-01970 CVE-2010-2055 · GHSA-pxh5-rx4p-mm6h

Ghostscript 8.71 and earlier reads initialization files from the current working…

LOW 32

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00505 Published 2010-07-22 Fixed CWE-17

TI-2010-03842 CVE-2010-4054 · GHSA-v2wp-vq4f-gx8c

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial…

LOW 25

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02609 Published 2010-10-22 Fixed CWE-119

Open these records in search →

Critical	31
High	121
Medium	113
Low	1
No CVSS	0