Ghostscript Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

9.2049
9.2248
9.1042
9.041
9.141

Przeciwdziałanie

Official Fix105
Temporary Fix0
Workaround0
Unavailable1
Not Defined29

Wykorzystywanie

High2
Functional0
Proof-of-Concept14
Unproven1
Not Defined118

Wektor dostępu

Not Defined0
Physical0
Local51
Adjacent7
Network77

Uwierzytelnianie

Not Defined0
High0
Low12
None123

Interakcja z użytkownikiem

Not Defined0
Required58
None77

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤42
≤516
≤631
≤746
≤824
≤95
≤1011

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤517
≤631
≤751
≤821
≤97
≤106

VulDB

≤10
≤20
≤31
≤419
≤55
≤645
≤715
≤836
≤93
≤1011

NVD

≤10
≤20
≤30
≤40
≤50
≤642
≤71
≤848
≤93
≤108

CNA

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤89
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k51
<2k36
<5k48
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k123
<2k12
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (165): 0.0.1, 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 2.6, 3.22, 4.3, 4.3.2, 5.10.1, 5.10.10 1, 5.10.12cl, 5.10.15, 5.10.16, 5.10cl, 5.50, 5.50.8, 5.50.8 7, 6.51, 6.52, 6.53, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.05, 7.06, 7.07, 8.0, 8.0.1, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 8.11, 8.12, 8.13, 8.14, 8.15, 8.15.2, 8.16, 8.17, 8.18, 8.19, 8.20, 8.21, 8.22, 8.23, 8.24, 8.25, 8.26, 8.27, 8.28, 8.29, 8.30, 8.31, 8.32, 8.33, 8.34, 8.35, 8.36, 8.37, 8.38, 8.39, 8.40, 8.41, 8.42, 8.43, 8.44, 8.45, 8.46, 8.47, 8.48, 8.49, 8.50, 8.51, 8.52, 8.53, 8.54, 8.55, 8.56, 8.57, 8.58, 8.59, 8.60, 8.61, 8.62, 8.63, 8.64, 8.70, 9.0, 9.04, 9.06, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 9.12, 9.13, 9.14, 9.15, 9.16, 9.17, 9.18, 9.19, 9.20, 9.21, 9.22, 9.23, 9.24, 9.25, 9.26, 9.27, 9.28, 9.29, 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.36, 9.37, 9.38, 9.39, 9.40, 9.41, 9.42, 9.43, 9.44, 9.45, 9.46, 9.47, 9.48, 9.49, 9.50, 9.51, 9.52, 10.01, 10.01.1, 10.01.2, 10.02, 2017-04-26

Link to Product Website: https://artifex.com/

Typ oprogramowania: Document Processing Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-02-058.07.9Artifex Ghostscript PDF Document gdevtxtw.c txtwrite memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-36773
2023-12-075.95.8Artifex Ghostscript gdev_prn_open_printer_seekable denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-46751
2023-09-188.07.9Artifex Ghostscript GhostPDL gdevijs.c Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-43115
2023-08-234.14.1Artifex Ghostscript Incomplete Fix CVE-2020-16305 memory corruption$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2023-4042
2023-08-236.06.0Artifex Ghostscript PDF File gdevclj.c clj_media_size denial of service$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-21890
2023-08-234.94.8Artifex Ghostscript PDF File gdevepsn.c eps_print_page denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-21710
2023-07-255.55.4Artifex Ghostscript plfont.c pl_glyph_name memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38560
2023-07-254.54.4Artifex Ghostscript gdevdevn.c devn_pcx_write_rle information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38559
2023-06-266.66.5Artifex Ghostscript Pipe Character privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-36664
2023-03-317.67.6Artifex Ghostscript Postscript Interpreter sbcp.c TBCPDecode memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-28879
2022-08-206.76.5GhostScript PDF gdevlp8k.c lp8000_print_page memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-27792
2022-06-173.53.4Ghostscript denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-2085
2022-04-255.55.3Artifex Ghostscript completefont Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-25059
2022-02-175.55.5Ghostscript privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.07CVE-2021-3781
2020-09-034.44.4Ghostscript igc.c igc_reloc_struct_ptr memory corruption$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-14373
2020-08-136.46.4Artifex Ghostscript gdevlips.c GetNumSameData memory corruption$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2020-17538
2020-08-135.45.2Artifex Ghostscript gdevdm24.c dot24_print_page denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16310
2020-08-136.46.2Artifex Ghostscript gdevlxm.c lxm5700m_print_page memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16309
2020-08-136.46.2Artifex Ghostscript gdevcdj.c p_print_image memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16308
2020-08-135.45.2Artifex Ghostscript gdevtxtw.c denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16307
2020-08-135.45.2Artifex Ghostscript gdevtsep.c denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16306
2020-08-136.46.2Artifex Ghostscript gdev10v.c pcx_write_rle memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16305
2020-08-137.57.2Artifex Ghostscript gxicolor.c image_render_color_thresh memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16304
2020-08-137.57.2Artifex Ghostscript gdevxps.c xps_finish_image_path memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16303
2020-08-137.57.2Artifex Ghostscript gdev3852.c jetp3852_print_page memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-16302

110 więcej wpisów nie jest pokazywanych

Do you want to use VulDB in your project?

Use the official API to access entries easily!