An integer overflow flaw was found in Ghostscript's TrueType bytecode interpreter. An attacker could create a specially crafted PostScript or PDF file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2009-3743)

It was found that Ghostscript always tried to read Ghostscript system initialization files from the current working directory before checking other directories, even if a search path that did not contain the current working directory was specified with the '-I' option, or the '-P-' option was used (to prevent the current working directory being searched first). If a user ran Ghostscript in an attacker-controlled directory containing a system initialization file, it could cause Ghostscript to execute arbitrary PostScript code.
(CVE-2010-2055)

Ghostscript included the current working directory in its library search path by default. If a user ran Ghostscript without the '-P-' option in an attacker-controlled directory containing a specially crafted PostScript library file, it could cause Ghostscript to execute arbitrary PostScript code. With this update, Ghostscript no longer searches the current working directory for library files by default.
(CVE-2010-4820)

Note: The fix for CVE-2010-4820 could possibly break existing configurations. To use the previous, vulnerable behavior, run Ghostscript with the '-P' option (to always search the current working directory first).

A flaw was found in the way Ghostscript interpreted PostScript Type 1 and PostScript Type 2 font files. An attacker could create a specially crafted PostScript Type 1 or PostScript Type 2 font file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2010-4054)

Updated ghostscript packages that fix two security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files.

Ghostscript included the current working directory in its library search path by default. If a user ran Ghostscript without the '-P-' option in an attacker-controlled directory containing a specially crafted PostScript library file, it could cause Ghostscript to execute arbitrary PostScript code. With this update, Ghostscript no longer searches the current working directory for library files by default.
(CVE-2010-4820)

Note: The fix for CVE-2010-4820 could possibly break existing configurations. To use the previous, vulnerable behavior, run Ghostscript with the '-P' option (to always search the current working directory first).

A flaw was found in the way Ghostscript interpreted PostScript Type 1 and PostScript Type 2 font files. An attacker could create a specially crafted PostScript Type 1 or PostScript Type 2 font file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2010-4054)

Users of Ghostscript are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

This update of ghostscript fixes two security issues :

  - Off-by-one error in the TrueType bytecode interpreter in     Ghostscript in SUSE Linux Enterprise 10 and 11 products     allows remote attackers to cause a denial of service     (heap memory corruption) via a malformed TrueType font     in a document. (CVE-2009-3743)

  - The gs_type2_interpret function in Ghostscript allows     remote attackers to cause a denial of service (incorrect     pointer dereference and application crash) via crafted     font data in a compressed data stream. (CVE-2010-4054)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0095 advisory.

    - Applied upstream fix to last patch (CVE-2010-4054, bug #646086).
    - Applied patch to prevent null pointer dereference (CVE-2010-4054,       bug #646086).
    - Don't ship patch backup files for CVE-2010-2055.
    - Applied patch to prevent integer underflow in TrueType bytecode       interpreter (CVE-2009-3743, bug #627902).

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-100:01 advisory.

    Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the     Ghostscript library, which implements the graphics capabilities in the PostScript language) and an     interpreter for Portable Document Format (PDF) files. Ghostscript translates PostScript code into many     common, bitmapped formats, like those understood by your printer or screen. Ghostscript is normally used     to display PostScript files and to print PostScript files to non-PostScript printers.
    If you need to display PostScript files or print them to non-PostScript printers, you should install     ghostscript. If you install ghostscript, you also need to install the ghostscript-fonts package.
    Security issues fixed with this release:
    CVE-2009-3743     Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before     8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory     corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based     buffer overflow.
    CVE-2010-2055     Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows     local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support     for the -P- option to the gs program.
    CVE-2010-4054     The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service     (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream,     aka bug 691043.
    CVE-2010-4820     No description available at the time of writing, use the CVE link.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201412-17 (GPL Ghostscript: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GPL Ghostscript. Please       review the CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted PostScript file or PDF using GPL Ghostscript, possibly resulting       in execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
69649	Amazon Linux AMI : ghostscript (ALAS-2012-42)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	high
57823	RHEL 4 : ghostscript (RHSA-2012:0096)	Nessus	Red Hat Local Security Checks	2012/2/3	2021/1/14	medium
58791	SuSE 10 Security Update : ghostscript (ZYPP Patch Number 8063)	Nessus	SuSE Local Security Checks	2012/4/19	2021/1/19	high
68450	Oracle Linux 5 / 6 : ghostscript (ELSA-2012-0095)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	high
284365	MiracleLinux 4 : ghostscript-8.70-11.AXS4.6 (AXSA:2012-100:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
79970	GLSA-201412-17 : GPL Ghostscript: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/12/15	2021/1/6	high

检测

插件搜索

high

medium

high

high

high

high