Gpl Ghostscript
Vendor:
First CVE: May 12, 2010 · Active for 16 years
16
Total CVEs
More Total CVEs than 92% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 83% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Gpl Ghostscript over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 12, 2010
16 years ago
Most Recent CVE
Oct 19, 2018
2,836 days ago
CVE Severity & Scoring
Gpl Ghostscript16 CVEs
19%
81%
All CVEs352,708 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local8 (50.0%)
Network0 (0.0%)
Unknown8 (50.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (50.0%)
High0 (0.0%)
Unknown8 (50.0%)
User Interaction
None0 (0.0%)
Unknown8 (50.0%)
Required8 (50.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (50.0%)
Unknown8 (50.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-16509HIGH An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers ab | Sep 5, 2018 | 7.8 | 88 | NO | YES |
CVE-2010-1869HIGH Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file. | May 12, 2010 | 9.3 | 45 | NO | YES |
CVE-2018-18284HIGH Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator. | Oct 19, 2018 | 8.6 | 35 | NO | NO |
CVE-2010-1628HIGH Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invo | May 19, 2010 | 9.3 | 30 | NO | NO |
CVE-2012-4875HIGH Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a | Sep 6, 2012 | 9.3 | 28 | NO | NO |
CVE-2009-3743HIGH Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of s | Aug 26, 2010 | 9.3 | 28 | NO | NO |
CVE-2009-4897HIGH Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted P | Jul 22, 2010 | 9.3 | 28 | NO | NO |
CVE-2018-15911HIGH In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter | Aug 28, 2018 | 7.8 | 27 | NO | NO |
CVE-2018-16513HIGH In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have | Sep 5, 2018 | 7.8 | 26 | NO | NO |
CVE-2018-16510HIGH An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply craft | Sep 5, 2018 | 7.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
6.2% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
12.5% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Gpl Ghostscript
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.04 | 1 | 9.3 | 4.3% | 0 | 0 |
| 8.71 | 2 | 6.8 | 4.6% | 0 | 0 |
| 8.70 | 5 | 7.9 | 4.6% | 0 | 1 |
| 8.64 | 5 | 7.9 | 4.7% | 0 | 1 |
| 8.63 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.62 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.61 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.60 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.57 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.56 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.54 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.51 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.50 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.15 | 4 | 7.5 | 4.1% | 0 | 0 |
| 8.01 | 4 | 7.5 | 4.1% | 0 | 0 |