ALAS-2012-127 --- ghostscriptID: oval:org.secpod.oval:def:1601315 | Date: (C)2020-11-27 (M)2023-11-10 |
Class: PATCH | Family: unix |
An integer overflow flaw, leading to a heap-based buffer overflow, was found in Ghostscript"s International Color Consortium Format library . An attacker could create a specially-crafted PostScript or PDF file with embedded images that would cause Ghostscript to crash or, potentially, execute arbitrary code with the privileges of the user running Ghostscript
Platform: |
Amazon Linux AMI |