cbcvebase.
CVE-2023-52722
published 2024-04-28

CVE-2023-52722: An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.

Affected

9 ranges
VendorProductVersion rangeFixed in
artifexghostscript< 10.03.110.03.1
artifexghostscript>= 0 < 9.53.3~dfsg-7+deb11u79.53.3~dfsg-7+deb11u7
artifexghostscript>= 0 < 10.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u4
artifexghostscript>= 0 < 10.02.0~dfsg-110.02.0~dfsg-1
artifexghostscript>= 0 < 10.02.0~dfsg-110.02.0~dfsg-1
artifexghostscript>= 0 < 9.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.12
artifexghostscript>= 0 < 9.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.7
artifexghostscript>= 0 < 10.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.1
debianghostscript< ghostscript 10.0.0~dfsg-11+deb12u4 (bookworm)ghostscript 10.0.0~dfsg-11+deb12u4 (bookworm)

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
osv5.5MEDIUM