PT-2003-1059 · Gnu+1 · Gnu Ghostscript+1

Publicado 2003-05-30 · Atualizado 2017-10-11 · CVE-2003-0354

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNU Ghostscript versions prior to 7.07 hpijs (affected versions not specified)

Description The issue allows attackers to execute arbitrary commands, even when safety restrictions are enabled, via a malicious PostScript file. This can be triggered by a print job. Additionally, there is a vulnerability in the hpijs package that can lead to a breach of confidentiality, integrity, and availability of protected information, and it can be exploited remotely.

Recommendations For GNU Ghostscript versions prior to 7.07, update to version 7.07 or later to resolve the issue. For hpijs, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2015-07879

CVE-2003-0354

Produtos afetados

Gnu Ghostscript

Hpijs

Referências · 8

• http://marc.info/?l=bugtraq&m=105465818929172&w=2 · Nota
• http://redhat.com/support/errata/RHSA-2003-182.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-07879 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2003-181.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0354 · Nota de Segurança
• https://rhn.redhat.com/errata/RHSA-2003-181.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A133 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2003:065 · Aviso do Fabricante