PT-2003-1059 · Gnu+1 · Gnu Ghostscript+1

Published 2003-05-30 · Updated 2017-10-11 · CVE-2003-0354

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GNU Ghostscript versions prior to 7.07 hpijs (affected versions not specified)

Description The issue allows attackers to execute arbitrary commands, even when safety restrictions are enabled, via a malicious PostScript file. This can be triggered by a print job. Additionally, there is a vulnerability in the hpijs package that can lead to a breach of confidentiality, integrity, and availability of protected information, and it can be exploited remotely.

Recommendations For GNU Ghostscript versions prior to 7.07, update to version 7.07 or later to resolve the issue. For hpijs, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-07879

CVE-2003-0354

Affected Products

Gnu Ghostscript

Hpijs

References · 8

• http://redhat.com/support/errata/RHSA-2003-182.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07879 · Security Note
• http://redhat.com/support/errata/RHSA-2003-181.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0354 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2003:065 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=105465818929172&w=2 · Note
• https://rhn.redhat.com/errata/RHSA-2003-181.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A133 · Note