[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

251139

 
 

909

 
 

196159

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-5446-1 ghostscript -- ghostscript

ID: oval:org.secpod.oval:def:610713Date: (C)2023-07-14   (M)2023-12-26
Class: PATCHFamily: unix




It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly handle permission validation for pipe devices, which could result in the execution of arbitrary commands if malformed document files are processed.

Platform:
Debian 12.x
Debian 11.x
Product:
libgs-dev
ghostscript
libgs10
libgs-common
libgs9
Reference:
DSA-5446-1
CVE-2023-36664
CVE    1
CVE-2023-36664

© SecPod Technologies