Bug 694724

Summary: GhostScript information disclosure - paranoidsafer
Product: Ghostscript Reporter: Andrei Costin (www.firmware.re) <zveriu>
Component: GeneralAssignee: Chris Liddell (chrisl) <chris.liddell>
Status: RESOLVED FIXED QA Contact: Bug traffic <tech>
Severity: normal    
Priority: P4 CC: indiancyberteam, omarandemad
Version: 9.10   
Hardware: PC   
OS: All   
Customer: Word Size: ---

Description Andrei Costin (www.firmware.re) 2013-10-21 02:47:48 UTC
Reproduced on GS 9.10 built from sources (http://downloads.ghostscript.com/public/ghostscript-9.10.tar.gz)

More details will be release in a private attachment.

PS: Would it be possible to add "Security" to the list of "Components"?
Comment 1 Andrei Costin (www.firmware.re) 2013-10-21 02:52:44 UTC
A CVE was requested from MITRE and the following was assigned.

Please use this CVE as reference in patching or info dissemination related to this particular issue.

CVE-2013-5653
Comment 3 Marcos H. Woehrmann 2013-10-22 08:14:34 UTC
I've added the details in a private comment and will investigate the reported issue.