Pro-Linux

Sicherheit: Pufferüberlauf in ghostscript

Plattformen: SUSE Linux Enterprise Server for SAP 12-SP1, SUSE OpenStack Cloud 7, SUSE Linux Enterprise Server 12-SP1-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server 12 ...
Simon Fraser University

[linux-security] ghostscript allows execution of arbitrary code

Topic ===== ghostscript can be tricked into executing arbitrary code Problem Description ===== An untrusted PostScript file can cause ghostscript to execute arbitrary commands due to insufficient ...
Pro-Linux

Sicherheit: Ausführen beliebiger Kommandos in ghostscript

Plattformen: SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 9, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Server 12 SP5, SUSE Linux Enterprise High Performance ...
ZDNet

Ghostscript flaw could allow attackers to take remote control of systems - and there's no fix yet

A vulnerability in Ghostscript, a widely used interpreter for Adobe PostScript and PDF page description languages, could allow attackers to remotely take control of vulnerable systems -- and there's ...
Ars Technica

Unforked Ghostscript released, now under the GPL, and works with CUPS

This week Ghostscript, an open source postscript processor, released version 8.60. Ghostscript releases are not normally newsworthy since they are frequent and incremental, but this release is special ...
Bleeping Computer

No Patch Available Yet for New Major Vulnerability in Ghostscript Interpreter

Tavis Ormandy, a Google Project Zero security researcher, has revealed details about a new major vulnerability discovered in Ghostscript, an interpreter for Adobe's PostScript and PDF page description ...
heise online

Ghostscript: Code smuggling loophole is attacked

IT security researchers have discovered five security vulnerabilities in Ghostscript. Attackers can, for example, bypass the sandbox and execute arbitrary code. A proof-of-concept exploit is publicly ...