资讯

腾讯网2 年

Ghostscript开源PDF库中发现关键漏洞

在Linux中广泛使用的PostScript语言和PDF文件开源解释器Ghostscript被发现存在严重远程代码执行漏洞。 该漏洞被标记为CVE-2023-3664，CVSS v3评级为9.8，影响10.01.2之前的所有Ghostscript版本，10.01.2是三周前发布的最新版本。 据Kroll公司的分析师G. Glass和D. Truman称，他们针对 ...
ZDNet7 年

Ghostscript flaw could allow attackers to take remote control of systems - and there's no ...

A vulnerability in Ghostscript, a widely used interpreter for Adobe PostScript and PDF page description languages, could allow attackers to remotely take control of vulnerable systems -- and there's ...
Bleeping Computer2 年

Critical RCE found in popular Ghostscript open-source PDF library

Ghostscript, an open-source interpreter for PostScript language and PDF files widely used in Linux, has been found vulnerable to a critical-severity remote code execution flaw. The flaw is tracked as ...
Bleeping Computer7 年

No Patch Available Yet for New Major Vulnerability in Ghostscript Interpreter

Tavis Ormandy, a Google Project Zero security researcher, has revealed details about a new major vulnerability discovered in Ghostscript, an interpreter for Adobe's PostScript and PDF page description ...
Infosecurity-magazine.com7 年

New Major Ghostscript Vulnerability Discovered

Google Project Zero security researcher Tavis Ormandy has exposed a new vulnerability in Ghostscript, a widely used suite of software based on an interpreter for Adobe Systems’ PostScript and Portable ...
IT World Canada2 年

Linux distributors, open source developers warned to update Ghostscript

Linux distributors and application developers using the open-source Ghostscript interpreter for the PostScript language and PDFs are being urged to apply the latest security patch for the utility ...
heise online5月

Security patch: Attackers can exploit nine vulnerabilities in Ghostscript

Ghostscript can be attacked via several security vulnerabilities. Further information on the vulnerabilities is still pending. A security patch is available. There are currently no reports of attacks.