Vulnerability index

Browse CVEs

131 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ghostscript MEDIUM 5.5
CVE-2016-7977

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use …

Fix: after 9.20
Fix from $1,600 2017-05-23
Ghostscript MEDIUM 5.5
CVE-2017-8908

The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a cr…

Patch available
Fix from $1,600 2017-05-12
Jbig2dec HIGH 7.1
CVE-2017-7976

Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c durin…

Mitigation only
Fix from $1,950 2017-04-19
Jbig2dec HIGH 7.8
CVE-2017-7975

Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function i…

Mitigation only
Fix from $1,950 2017-04-19
Ghostscript HIGH 7.8
CVE-2017-7948

Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and…

Patch available
Fix from $1,950 2017-04-19
Jbig2dec HIGH 7.1
CVE-2017-7885

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from …

Mitigation only
Fix from $1,950 2017-04-17
Ghostscript HIGH 7.8
CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possi…

Fix: after 9.20
Fix from $1,950 2017-04-14
Ghostscript HIGH 7.8
CVE-2016-10317

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of ser…

Patch available
Fix from $1,950 2017-04-03
Ghostscript MEDIUM 5.5
CVE-2016-10217

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-…

Patch available
Fix from $1,600 2017-04-03
Ghostscript MEDIUM 5.5
CVE-2016-10218

The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote a…

Patch available
Fix from $1,600 2017-04-03
Ghostscript MEDIUM 5.5
CVE-2016-10219

The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-ze…

Patch available
Fix from $1,600 2017-04-03
Ghostscript MEDIUM 5.5
CVE-2016-10220

The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of servic…

Patch available
Fix from $1,600 2017-04-03
Ghostscript MEDIUM 5.5
CVE-2017-5951

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service…

Patch available
Fix from $1,600 2017-04-03
Mupdf MEDIUM 5.3
CVE-2017-7264

Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of…

Patch available
Fix from $1,600 2017-03-26
Mujs CRITICAL 9.8
CVE-2016-10133

Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by …

Patch available
Fix from $2,300 2017-03-24
Ghostscript MEDIUM 5.5
CVE-2017-7207

The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer der…

Patch available
Fix from $1,600 2017-03-21
Afpl Ghostscript HIGH 7.8
CVE-2017-6196

Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739…

Fix: after 8452f9238959a4d518af365812bf031fe4d8d4b7
Fix from $1,950 2017-02-24
Mupdf MEDIUM 5.5
CVE-2016-8674

The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application cra…

Fix: after 1.9a
Fix from $1,600 2017-02-15
Mupdf MEDIUM 5.5
CVE-2017-5896

Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (…

Fix: after 1.10
Fix from $1,600 2017-02-15
Mujs HIGH 7.8
CVE-2017-5627

An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks…

Fix: 2017-01-24+
Fix from $1,950 2017-01-30
Mujs HIGH 7.8
CVE-2017-5628

An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not val…

Fix: 2017-01-24+
Fix from $1,950 2017-01-30
Mujs HIGH 7.5
CVE-2016-9109

Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences. NOTE: this vulnerabi…

No fix yet
Fix from $1,950 2017-01-18
Mujs HIGH 7.5
CVE-2016-7563

The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of …

No fix yet
Fix from $1,950 2017-01-18
Mujs HIGH 7.5
CVE-2016-7564

Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash)…

No fix yet
Fix from $1,950 2017-01-18
Mujs CRITICAL 9.8
CVE-2016-10141

An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb86…

Fix: 2017-01-12+
Fix from $2,300 2017-01-13
Mujs HIGH 7.5
CVE-2016-9294

Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (applica…

Fix: 2016-10-26+
Fix from $1,950 2016-11-12
Mujs HIGH 7.5
CVE-2016-9136

Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by usi…

Fix: after 2016-10-31
Fix from $1,950 2016-11-03
Mujs HIGH 7.5
CVE-2016-7506

An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de8…

Fix: after 8c805b4eb19cf2af689c860b77e6111d2ee439d5
Fix from $1,950 2016-10-29
Mujs CRITICAL 9.8
CVE-2016-7505

A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A succ…

Patch available
Fix from $2,300 2016-10-29
Mujs CRITICAL 9.8
CVE-2016-7504

A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A…

Fix: after 5000749f5afe3b956fc916e407309de840997f4a
Fix from $2,300 2016-10-29