CVE-2003-0354
published 2003-06-16CVE-2003-0354: Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that…
PriorityP428high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.87%
77.0th percentile
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
| redhat | linux | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2003-05-18·CVSS 7.5
CVE-2003-0354 [HIGH] security flaw
security flaw
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
GHSA
GHSA-cf67-p57q-gjjc: Unknown vulnerability in GNU Ghostscript before 7
ghsa_unreviewed·2022-04-29
CVE-2003-0354 [HIGH] GHSA-cf67-p57q-gjjc: Unknown vulnerability in GNU Ghostscript before 7
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2003-0354 security flaw
bugzilla·2018-08-16·CVSS 7.5
CVE-2003-0354 [HIGH] CVE-2003-0354 security flaw
CVE-2003-0354 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.
Bugzilla
CAN-2003-0354 ghostscript -dSAFER execution vulnerability
bugzilla·2003-05-19
[MEDIUM] CAN-2003-0354 ghostscript -dSAFER execution vulnerability
CAN-2003-0354 ghostscript -dSAFER execution vulnerability
A bug in ghostscript allows a malicious postscript file to
execute arbitrary commands when viewed even when using the -dSAFER flag.
However, the -dPARANOIDSAFER flag, used by printing etc, continues to block this
vulnerability, so the vulnerability has limited effect.
RHSA to follow
CVE applied for
CERT VU#538404
Discussion:
An errata has been issued which should help the problem described in this bug report.
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen
this bug report if the solution does not work for you.
http://rhn.redhat.com/errata/RHSA-2003-182.html
http://marc.info/?l=bugtraq&m=105465818929172&w=2http://www.mandriva.com/security/advisories?name=MDKSA-2003:065http://www.redhat.com/support/errata/RHSA-2003-181.htmlhttp://www.redhat.com/support/errata/RHSA-2003-182.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A133http://marc.info/?l=bugtraq&m=105465818929172&w=2http://www.mandriva.com/security/advisories?name=MDKSA-2003:065http://www.redhat.com/support/errata/RHSA-2003-181.htmlhttp://www.redhat.com/support/errata/RHSA-2003-182.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A133
2003-06-16
Published