Search CVE reports
271 – 272 of 272 results
Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file containing a long Range array in a .seticcspace operator.
3 affected packages
ghostscript, gs-esp, gs-gpl
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ghostscript | — | — | — | — | — |
| gs-esp | — | — | — | — | — |
| gs-gpl | — | — | — | — | — |
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remote user-assisted attackers to cause a denial of service (crash) and possibly corrupt the heap via malformed...
3 affected packages
ghostscript, gs-gpl, jasper
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ghostscript | — | — | — | — | — |
| gs-gpl | — | — | — | — | — |
| jasper | — | — | — | — | — |