Priority LOW 21
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vul…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00471 · Published 2014-10-27 · Fixed CWE-94
Priority MEDIUM 40
Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Management System, allow remote attackers to cause…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07486 · Published 2012-09-18 · Fixed CWE-189
Priority MEDIUM 50
Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF f…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06903 · Published 2009-12-21 · No fix listed CWE-119
Priority MEDIUM 50
Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arb…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07433 · Published 2009-04-16 · Fixed CWE-119
Priority MEDIUM 47
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow conte…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03991 · Published 2009-04-14 · Fixed CWE-189
Priority LOW 30
Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postsc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04495 · Published 2009-04-08 · Fixed CWE-119
Priority MEDIUM 41
The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0484 · Published 2009-04-08 · Fixed CWE-119
Priority MEDIUM 47
icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cau…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04074 · Published 2009-03-23 · Fixed CWE-189
Priority MEDIUM 48
Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow conte…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04747 · Published 2009-03-23 · Fixed CWE-119
Priority MEDIUM 45
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcs…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.14523 · Published 2008-02-28 · Fixed CWE-119