CVE-2012-4875

概要

参考情報

• bugs.ghostscript.com/show_bug.cgi
• secunia.com/advisories/47855 · Vendor Advisory
• securityfocus.com/bid/52864
• exchange.xforce.ibmcloud.com/vulnerabilities/74554

gpl ghostscript のその他の脆弱性

• CVE-2018-18284高 8.6Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.
• CVE-2018-16513高 7.8In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to…
• CVE-2018-16510高 7.8An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used …
• CVE-2018-16509高 7.8An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess …
• CVE-2018-15911高 7.8In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesd…