CVE-2009-3743

概要

参考情報

• security.gentoo.org/glsa/glsa-201412-17.xml
• kb.cert.org/vuls/id/644319 · US Government Resource
• kb.cert.org/vuls/id/JALR-87YGN8 · US Government Resource
• securityfocus.com/archive/1/514892/100/0/threaded
• securitytracker.com/id
• rhn.redhat.com/errata/RHSA-2012-0095.html

afpl ghostscript のその他の脆弱性

• CVE-2013-5653中 5.5The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a …
• CVE-2017-6196高 7.8Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432…
• CVE-2015-3228中 6.8Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a d…
• CVE-2010-4054中 4.3The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and appli…
• CVE-2010-2055高 7.2Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary Po…