Bug 694724

Summary:	GhostScript information disclosure - paranoidsafer
Product:	Ghostscript	Reporter:	Andrei Costin (www.firmware.re) <zveriu>
Component:	General	Assignee:	Chris Liddell (chrisl) <chris.liddell>
Status:	RESOLVED FIXED
Severity:	normal	CC:	chander.romesh, indiancyberteam, omarandemad
Priority:	P4
Version:	9.10
Hardware:	PC
OS:	All
Customer:		Word Size:	---

Description Andrei Costin (www.firmware.re) 2013-10-21 02:47:48 UTC

Reproduced on GS 9.10 built from sources (http://downloads.ghostscript.com/public/ghostscript-9.10.tar.gz)

More details will be release in a private attachment.

PS: Would it be possible to add "Security" to the list of "Components"?

Comment 1 Andrei Costin (www.firmware.re) 2013-10-21 02:52:44 UTC

A CVE was requested from MITRE and the following was assigned.

Please use this CVE as reference in patching or info dissemination related to this particular issue.

CVE-2013-5653

Comment 3 Marcos H. Woehrmann 2013-10-22 08:14:34 UTC

I've added the details in a private comment and will investigate the reported issue.