[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2017-837 ---- ghostscript

ID: oval:org.secpod.oval:def:1600705Date: (C)2017-06-07   (M)2023-12-20
Class: PATCHFamily: unix




It was found that ghostscript did not properly validate the parameters passedto the .rsdparams and .eqproc functions. During its execution, a speciallycrafted PostScript document could execute code in the context of the ghostscriptprocess, bypassing the -dSAFER protection

Platform:
Amazon Linux AMI
Product:
ghostscript
Reference:
ALAS-2017-837
CVE-2017-8291
CVE    1
CVE-2017-8291
CPE    2
cpe:/o:amazon:linux
cpe:/a:ghostscript:ghostscript

© SecPod Technologies