artifex Vulnerability Advisory Catalog

Total 248 security vulnerabilities recorded for artifex software and firmware.

← Back to All Vendors
Component: ghostscript_ghostxps

The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and a...

📅 2017-07-26
CVSS 7.8 Dossier →
Component: ghostscript

The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer ...

📅 2017-07-26
CVSS 7.8 Dossier →
Component: ghostscript_ghostxps

The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based...

📅 2017-07-26
CVSS 7.8 Dossier →
CVE-2017-9216 MEDIUM
Component: jbig2dec

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_hu...

📅 2017-05-24
CVSS 6.5 Dossier →
CVE-2016-7979 CRITICAL
Component: ghostscript

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveragi...

📅 2017-05-23
CVSS 9.8 Dossier →
CVE-2016-7978 CRITICAL
Component: ghostscript

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .se...

📅 2017-05-23
CVSS 9.8 Dossier →
CVE-2016-7977 MEDIUM
Component: ghostscript

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use o...

📅 2017-05-23
CVSS 5.5 Dossier →
CVE-2017-8908 MEDIUM
Component: ghostscript

The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a cra...

📅 2017-05-12
CVSS 5.5 Dossier →
Component: ghostscript

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" s...

📅 2017-04-27
CVSS 7.8 Dossier →
Component: jbig2dec

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during...

📅 2017-04-19
CVSS 7.1 Dossier →
Component: jbig2dec

Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function in...

📅 2017-04-19
CVSS 7.8 Dossier →
Component: ghostscript

Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and ...

📅 2017-04-19
CVSS 7.8 Dossier →
Component: jbig2dec

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from p...

📅 2017-04-17
CVSS 7.1 Dossier →
Component: ghostscript

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possib...

📅 2017-04-14
CVSS 7.8 Dossier →
Component: ghostscript

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of serv...

📅 2017-04-03
CVSS 7.8 Dossier →
CVE-2017-5951 MEDIUM
Component: ghostscript

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service ...

📅 2017-04-03
CVSS 5.5 Dossier →
Component: mupdf

The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a denial of service (stack consumptio...

📅 2017-04-03
CVSS 4.3 Dossier →
Component: ghostscript

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service...

📅 2017-04-03
CVSS 5.5 Dossier →
Component: ghostscript

The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zer...

📅 2017-04-03
CVSS 5.5 Dossier →
Component: ghostscript

The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote at...

📅 2017-04-03
CVSS 5.5 Dossier →
Component: ghostscript

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-f...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7264 MEDIUM
Component: mupdf

Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of ...

📅 2017-03-26
CVSS 5.3 Dossier →
CVE-2016-10133 CRITICAL
Component: mujs

Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by l...

📅 2017-03-24
CVSS 9.8 Dossier →
Component: mujs

regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regu...

📅 2017-03-24
CVSS 7.5 Dossier →
Page 9 of 11 (248 Total Records)