Browse CVEs

MEDIUM 5.5 CVE-2016-7977 Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use … Ghostscript after 9.20 Fix from $1,6002017-05-23 MEDIUM 5.5 CVE-2017-8908 The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a cr… Ghostscript Patch available Fix from $1,6002017-05-12 HIGH 7.1 CVE-2017-7976 Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c durin… Jbig2dec Mitigation only Fix from $1,9502017-04-19 HIGH 7.8 CVE-2017-7975 Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table function i… Jbig2dec Mitigation only Fix from $1,9502017-04-19 HIGH 7.8 CVE-2017-7948 Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and… Ghostscript Patch available Fix from $1,9502017-04-19 HIGH 7.1 CVE-2017-7885 Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from … Jbig2dec Mitigation only Fix from $1,9502017-04-17 HIGH 7.8 CVE-2016-8602 The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possi… Ghostscript after 9.20 Fix from $1,9502017-04-14 HIGH 7.8 CVE-2016-10317 The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of ser… Ghostscript Patch available Fix from $1,9502017-04-03 MEDIUM 5.5 CVE-2016-10217 The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-… Ghostscript Patch available Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2016-10218 The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote a… Ghostscript Patch available Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2016-10219 The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-ze… Ghostscript Patch available Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2016-10220 The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of servic… Ghostscript Patch available Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-5951 The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service… Ghostscript Patch available Fix from $1,6002017-04-03 MEDIUM 5.3 CVE-2017-7264 Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of… Mupdf Patch available Fix from $1,6002017-03-26 CRITICAL 9.8 CVE-2016-10133 Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by … Mujs Patch available Fix from $2,3002017-03-24 MEDIUM 5.5 CVE-2017-7207 The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer der… Ghostscript Patch available Fix from $1,6002017-03-21 HIGH 7.8 CVE-2017-6196 Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739… Afpl Ghostscript after 8452f9238959a4d518af365812bf031fe4d8d4b7 Fix from $1,9502017-02-24 MEDIUM 5.5 CVE-2016-8674 The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application cra… Mupdf after 1.9a Fix from $1,6002017-02-15 MEDIUM 5.5 CVE-2017-5896 Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (… Mupdf after 1.10 Fix from $1,6002017-02-15 HIGH 7.8 CVE-2017-5627 An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks… Mujs 2017-01-24+ Fix from $1,9502017-01-30 HIGH 7.8 CVE-2017-5628 An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not val… Mujs 2017-01-24+ Fix from $1,9502017-01-30 HIGH 7.5 CVE-2016-9109 Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences. NOTE: this vulnerabi… Mujs No fix yet Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-7563 The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of … Mujs No fix yet Fix from $1,9502017-01-18 HIGH 7.5 CVE-2016-7564 Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash)… Mujs No fix yet Fix from $1,9502017-01-18 CRITICAL 9.8 CVE-2016-10141 An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc. MuJS before fa3d30fd18c348bb4b1f3858fb86… Mujs 2017-01-12+ Fix from $2,3002017-01-13 HIGH 7.5 CVE-2016-9294 Artifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context-dependent attackers to conduct "denial of service (applica… Mujs 2016-10-26+ Fix from $1,9502016-11-12 HIGH 7.5 CVE-2016-9136 Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by usi… Mujs after 2016-10-31 Fix from $1,9502016-11-03 HIGH 7.5 CVE-2016-7506 An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc. MuJS before 5000749f5afe3b956fc916e407309de8… Mujs after 8c805b4eb19cf2af689c860b77e6111d2ee439d5 Fix from $1,9502016-10-29 CRITICAL 9.8 CVE-2016-7505 A buffer overflow vulnerability was observed in divby function of Artifex Software, Inc. MuJS before 8c805b4eb19cf2af689c860b77e6111d2ee439d5. A succ… Mujs Patch available Fix from $2,3002016-10-29 CRITICAL 9.8 CVE-2016-7504 A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A… Mujs after 5000749f5afe3b956fc916e407309de840997f4a Fix from $2,3002016-10-29