CVE-2010-4054

概要

参考情報

• ghostscript.com/pipermail/gs-cvs/2010-January/010333.html · Patch
• rhn.redhat.com/errata/RHSA-2012-0096.html
• security.gentoo.org/glsa/glsa-201412-17.xml
• kb.cert.org/vuls/id/538191 · Patch
• rhn.redhat.com/errata/RHSA-2012-0095.html

afpl ghostscript のその他の脆弱性

• CVE-2013-5653中 5.5The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a …
• CVE-2017-6196高 7.8Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432…
• CVE-2015-3228中 6.8Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a d…
• CVE-2009-3743緊急 9.3Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execu…
• CVE-2010-2055高 7.2Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary Po…