Most recent entries from all

bdu:2024-05697

BELL-CVE-2024-29507

Affected: Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript

EUVD-2026-205615

fkie_cve-2024-29507

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

GHSA-mjm5-gj95-f347

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

gsd-2024-29507

OESA-2024-2454 — ghostscript security update

Affected: openEuler:22.03-LTS-SP1: ghostscript

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.(CVE-2024-29507) An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.(CVE-2024-33871)

UBUNTU-CVE-2024-29507

Affected: Ubuntu:24.04:LTS: ghostscript

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

WID-SEC-W-2024-1525 — Ghostscript: Mehrere Schwachstellen

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen und Dateien zu manipulieren.