CVE-2023-36664

概要

参考情報

• artifex.com/blog/security-vulnerability-fixed-in-ghostscript-10.01.2
• bugs.ghostscript.com/show_bug.cgi · Issue Tracking
• git.ghostscript.com
• git.ghostscript.com
• lists.fedoraproject.org/archives/list/[email protected]/message/2ICXN5VPF3WJCYKMPSYER5KHTPJXSTJZ
• lists.fedoraproject.org/archives/list/[email protected]/message/5EWMEK2UPCUU3ZLL7VASE5CEHDQY4VKV
• security-tracker.debian.org/tracker/CVE-2023-36664
• security.gentoo.org/glsa/202309-03 · Third Party Advisory
• debian.org/security/2023/dsa-5446 · Third Party Advisory
• kroll.com/en/publications/cyber/ghostscript-cve-2023-36664-remote-code-execution-vulnerability
• git.ghostscript.com · Permissions Required
• git.ghostscript.com · Permissions Required
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ICXN5VPF3WJCYKMPSYER5KHTPJXSTJZ · Broken Link
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EWMEK2UPCUU3ZLL7VASE5CEHDQY4VKV · Broken Link

ghostscript のその他の脆弱性

• CVE-2025-59800中 5.5In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer ove…
• CVE-2025-59799中 5.5Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size v…
• CVE-2025-59798中 5.5Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
• CVE-2025-48708低 3.3gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A create…
• CVE-2025-46646中 4.5In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of …