The remote host is affected by the vulnerability described in GLSA-201412-17 (GPL Ghostscript: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in GPL Ghostscript. Please       review the CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker could entice a user to open a specially       crafted PostScript file or PDF using GPL Ghostscript, possibly resulting       in execution of arbitrary code with the privileges of the process or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Updated ghostscript packages that fix two security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files.

Ghostscript included the current working directory in its library search path by default. If a user ran Ghostscript without the '-P-' option in an attacker-controlled directory containing a specially crafted PostScript library file, it could cause Ghostscript to execute arbitrary PostScript code. With this update, Ghostscript no longer searches the current working directory for library files by default.
(CVE-2010-4820)

Note: The fix for CVE-2010-4820 could possibly break existing configurations. To use the previous, vulnerable behavior, run Ghostscript with the '-P' option (to always search the current working directory first).

A flaw was found in the way Ghostscript interpreted PostScript Type 1 and PostScript Type 2 font files. An attacker could create a specially crafted PostScript Type 1 or PostScript Type 2 font file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2010-4054)

Users of Ghostscript are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0095 advisory.

    Ghostscript is a set of software that provides a PostScript interpreter, a     set of C procedures (the Ghostscript library, which implements the graphics     capabilities in the PostScript language) and an interpreter for Portable     Document Format (PDF) files.

    An integer overflow flaw was found in Ghostscript's TrueType bytecode     interpreter. An attacker could create a specially-crafted PostScript or PDF     file that, when interpreted, could cause Ghostscript to crash or,     potentially, execute arbitrary code. (CVE-2009-3743)

    It was found that Ghostscript always tried to read Ghostscript system     initialization files from the current working directory before checking     other directories, even if a search path that did not contain the current     working directory was specified with the -I option, or the -P- option     was used (to prevent the current working directory being searched first).
    If a user ran Ghostscript in an attacker-controlled directory containing a     system initialization file, it could cause Ghostscript to execute arbitrary     PostScript code. (CVE-2010-2055)

    Ghostscript included the current working directory in its library search     path by default. If a user ran Ghostscript without the -P- option in an     attacker-controlled directory containing a specially-crafted PostScript     library file, it could cause Ghostscript to execute arbitrary PostScript     code. With this update, Ghostscript no longer searches the current working     directory for library files by default. (CVE-2010-4820)

    Note: The fix for CVE-2010-4820 could possibly break existing     configurations. To use the previous, vulnerable behavior, run Ghostscript     with the -P option (to always search the current working directory     first).

    A flaw was found in the way Ghostscript interpreted PostScript Type 1 and     PostScript Type 2 font files. An attacker could create a specially-crafted     PostScript Type 1 or PostScript Type 2 font file that, when interpreted,     could cause Ghostscript to crash or, potentially, execute arbitrary code.
    (CVE-2010-4054)

    Users of Ghostscript are advised to upgrade to these updated packages,     which contain backported patches to correct these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-97:01 advisory.

    Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the     Ghostscript library, which implements the graphics capabilities in the PostScript language) and an     interpreter for Portable Document Format (PDF) files. Ghostscript translates PostScript code into many     common, bitmapped formats, like those understood by your printer or screen. Ghostscript is normally used     to display PostScript files and to print PostScript files to non-PostScript printers.
    If you need to display PostScript files or print them to non-PostScript printers, you should install     ghostscript. If you install ghostscript, you also need to install the ghostscript-fonts package.
    Security issues fixed with this release:
    CVE-2009-3743     Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before     8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory     corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based     buffer overflow.
    CVE-2010-2055     Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows     local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support     for the -P- option to the gs program.
    CVE-2010-4054     The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service     (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream,     aka bug 691043.
    CVE-2010-4820     No description available at the time of writing, use the CVE link.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2012:0096 :

Updated ghostscript packages that fix two security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files.

Ghostscript included the current working directory in its library search path by default. If a user ran Ghostscript without the '-P-' option in an attacker-controlled directory containing a specially crafted PostScript library file, it could cause Ghostscript to execute arbitrary PostScript code. With this update, Ghostscript no longer searches the current working directory for library files by default.
(CVE-2010-4820)

Note: The fix for CVE-2010-4820 could possibly break existing configurations. To use the previous, vulnerable behavior, run Ghostscript with the '-P' option (to always search the current working directory first).

A flaw was found in the way Ghostscript interpreted PostScript Type 1 and PostScript Type 2 font files. An attacker could create a specially crafted PostScript Type 1 or PostScript Type 2 font file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2010-4054)

Users of Ghostscript are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

Updated ghostscript packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ghostscript is a set of software that provides a PostScript interpreter, a set of C procedures (the Ghostscript library, which implements the graphics capabilities in the PostScript language) and an interpreter for Portable Document Format (PDF) files.

An integer overflow flaw was found in Ghostscript's TrueType bytecode interpreter. An attacker could create a specially crafted PostScript or PDF file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2009-3743)

It was found that Ghostscript always tried to read Ghostscript system initialization files from the current working directory before checking other directories, even if a search path that did not contain the current working directory was specified with the '-I' option, or the '-P-' option was used (to prevent the current working directory being searched first). If a user ran Ghostscript in an attacker-controlled directory containing a system initialization file, it could cause Ghostscript to execute arbitrary PostScript code.
(CVE-2010-2055)

Ghostscript included the current working directory in its library search path by default. If a user ran Ghostscript without the '-P-' option in an attacker-controlled directory containing a specially crafted PostScript library file, it could cause Ghostscript to execute arbitrary PostScript code. With this update, Ghostscript no longer searches the current working directory for library files by default.
(CVE-2010-4820)

Note: The fix for CVE-2010-4820 could possibly break existing configurations. To use the previous, vulnerable behavior, run Ghostscript with the '-P' option (to always search the current working directory first).

A flaw was found in the way Ghostscript interpreted PostScript Type 1 and PostScript Type 2 font files. An attacker could create a specially crafted PostScript Type 1 or PostScript Type 2 font file that, when interpreted, could cause Ghostscript to crash or, potentially, execute arbitrary code. (CVE-2010-4054)

Users of Ghostscript are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
79970	GLSA-201412-17 : GPL Ghostscript: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2014/12/15	2021/1/6	high
57810	CentOS 4 : ghostscript (CESA-2012:0096)	Nessus	CentOS Local Security Checks	2012/2/3	2021/1/4	medium
57822	RHEL 6 : ghostscript (RHSA-2012:0095)	Nessus	Red Hat Local Security Checks	2012/2/3	2025/4/14	high
291487	MiracleLinux 3 : ghostscript-8.70-6.6.0.1.AXS3 (AXSA:2012-97:01)	Nessus	Miracle Linux Local Security Checks	2026/1/19	2026/1/19	high
68451	Oracle Linux 4 : ghostscript (ELSA-2012-0096)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
57809	CentOS 5 / 6 : ghostscript (CESA-2012:0095)	Nessus	CentOS Local Security Checks	2012/2/3	2021/1/4	high

偵測

搜尋 Plugin

high

medium

high

high

medium

high