CVE-2010-1628

概要

参考情報

• bugs.ghostscript.com/show_bug.cgi
• lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
• seclists.org/fulldisclosure/2010/May/134 · Exploit
• secunia.com/advisories/39753 · Vendor Advisory
• secunia.com/advisories/40580 · Vendor Advisory
• security.gentoo.org/glsa/glsa-201412-17.xml
• mandriva.com/security/advisories
• openwall.com/lists/oss-security/2010/05/12/1 · Exploit
• openwall.com/lists/oss-security/2010/05/18/7 · Exploit
• securityfocus.com/archive/1/511243/100/0/threaded
• securityfocus.com/bid/40107 · Exploit
• ubuntu.com/usn/USN-961-1
• vupen.com/english/advisories/2010/1138 · Vendor Advisory

gpl ghostscript のその他の脆弱性

• CVE-2018-18284高 8.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
• CVE-2018-16513高 7.8In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to…
• CVE-2018-16510高 7.8An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used …
• CVE-2018-16509高 7.8An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess …
• CVE-2018-15911高 7.8In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesd…