Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.1.2.2020.2309
Category:Huawei EulerOS Local Security Checks
Title:Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2020-2309)
Summary:The remote host is missing an update for the Huawei EulerOS; 'ghostscript' package(s) announced via the EulerOS-SA-2020-2309 advisory.
Description:Summary:
The remote host is missing an update for the Huawei EulerOS
'ghostscript' package(s) announced via the EulerOS-SA-2020-2309 advisory.

Vulnerability Insight:
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-17538)

A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16310)

A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted eps file. (CVE-2020-16309)

A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16308)

A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. (CVE-2020-16307)

A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript file. (CVE-2020-16306)

A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16305)

A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted eps file. (CVE-2020-16304)

A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16301)

A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16300)

A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16299)

A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. (CVE-2020-16298)

A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib ...

Description truncated. Please see the references for more information.

Affected Software/OS:
'ghostscript' package(s) on Huawei EulerOS V2.0SP8.

Solution:
Please install the updated package(s).

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-14373
Common Vulnerability Exposure (CVE) ID: CVE-2020-16287
Common Vulnerability Exposure (CVE) ID: CVE-2020-16288
Common Vulnerability Exposure (CVE) ID: CVE-2020-16289
Common Vulnerability Exposure (CVE) ID: CVE-2020-16290
Common Vulnerability Exposure (CVE) ID: CVE-2020-16291
Common Vulnerability Exposure (CVE) ID: CVE-2020-16292
Common Vulnerability Exposure (CVE) ID: CVE-2020-16293
Common Vulnerability Exposure (CVE) ID: CVE-2020-16294
Common Vulnerability Exposure (CVE) ID: CVE-2020-16295
Common Vulnerability Exposure (CVE) ID: CVE-2020-16296
Common Vulnerability Exposure (CVE) ID: CVE-2020-16297
Common Vulnerability Exposure (CVE) ID: CVE-2020-16298
Common Vulnerability Exposure (CVE) ID: CVE-2020-16299
Common Vulnerability Exposure (CVE) ID: CVE-2020-16300
Common Vulnerability Exposure (CVE) ID: CVE-2020-16301
Common Vulnerability Exposure (CVE) ID: CVE-2020-16304
Common Vulnerability Exposure (CVE) ID: CVE-2020-16305
Common Vulnerability Exposure (CVE) ID: CVE-2020-16306
Common Vulnerability Exposure (CVE) ID: CVE-2020-16307
Common Vulnerability Exposure (CVE) ID: CVE-2020-16308
Common Vulnerability Exposure (CVE) ID: CVE-2020-16309
Common Vulnerability Exposure (CVE) ID: CVE-2020-16310
Common Vulnerability Exposure (CVE) ID: CVE-2020-17538
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.