CVE

Id
58118  
CVE No.
CVE-2012-4875  
Status
Candidate  
Description
** DISPUTED ** Heap-based buffer overflow in gdevwpr2.c in Ghostscript 9.04, when processing the OutputFile device parameter, allows user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. NOTE: as of 20120314, the developer was not able to reproduce the issue and disputed it.  
Phase
Assigned (20120906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
597220 58118 CVE-2012-4875 MISC:http://bugs.ghostscript.com/show_bug.cgi?id=692856  View
597221 58118 CVE-2012-4875 BID:52864  View
597222 58118 CVE-2012-4875 URL:http://www.securityfocus.com/bid/52864  View
597223 58118 CVE-2012-4875 SECUNIA:47855  View
597224 58118 CVE-2012-4875 URL:http://secunia.com/advisories/47855  View
597225 58118 CVE-2012-4875 XF:ghostscript-outputfile-bo(74554)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28486 JVNDB-2012-004193 Sony DVD Architect Pro および DVD Architect Studio における権限を取得される脆弱性 Sony DVD Architect Pro および DVD Architect Studio には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2012-4880 58118 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004193.html  View