[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2019-6116Date: (C)2019-05-20   (M)2023-12-22


In Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system operators, leading to remote code execution.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.8CVSS Score : 6.8
Exploit Score: 1.8Exploit Score: 8.6
Impact Score: 5.9Impact Score: 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: REQUIREDConfidentiality: PARTIAL
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: HIGHAvailability: PARTIAL
Integrity: HIGH 
Availability: HIGH 
  
Reference:
BID-106700
https://seclists.org/bugtraq/2019/Apr/4
EXPLOIT-DB-46242
DSA-4372
FEDORA-2019-15d57af79a
FEDORA-2019-7b9bb0e426
FEDORA-2019-953fc0f16d
FEDORA-2019-9f06aa44f6
FEDORA-2019-ebd6c4f15a
GLSA-202004-03
RHBA-2019:0327
RHSA-2019:0229
USN-3866-1
https://lists.debian.org/debian-lts-announce/2019/02/msg00016.html
http://www.openwall.com/lists/oss-security/2019/03/21/1
http://www.openwall.com/lists/oss-security/2019/01/23/5
http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00047.html
http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00048.html
http://packetstormsecurity.com/files/151307/Ghostscript-Pseudo-Operator-Remote-Code-Execution.html
http://packetstormsecurity.com/files/152367/Slackware-Security-Advisory-ghostscript-Updates.html
https://bugs.chromium.org/p/project-zero/issues/detail?id=1729
https://bugs.ghostscript.com/show_bug.cgi?id=700317

CPE    8
cpe:/o:debian:debian_linux:9.0
cpe:/o:debian:debian_linux:8.0
cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~
cpe:/o:redhat:enterprise_linux_server:7.0
...
OVAL    16
oval:org.secpod.oval:def:89003318
oval:org.secpod.oval:def:89050702
oval:org.secpod.oval:def:117136
oval:org.secpod.oval:def:116125
...

© SecPod Technologies