Bug 694724 - GhostScript information disclosure - paranoidsafer
Summary: GhostScript information disclosure - paranoidsafer
Status: RESOLVED FIXED
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: General (show other bugs)
Version: 9.10
Hardware: PC All
: P4 normal
Assignee: Chris Liddell (chrisl)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-10-21 02:47 UTC by Andrei Costin (www.firmware.re)
Modified: 2022-01-09 07:53 UTC (History)
3 users (show)

See Also:
Customer:
Word Size: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Andrei Costin (www.firmware.re) 2013-10-21 02:47:48 UTC 
Reproduced on GS 9.10 built from sources (http://downloads.ghostscript.com/public/ghostscript-9.10.tar.gz)

More details will be release in a private attachment.

PS: Would it be possible to add "Security" to the list of "Components"?
Comment 1 Andrei Costin (www.firmware.re) 2013-10-21 02:52:44 UTC 
A CVE was requested from MITRE and the following was assigned.

Please use this CVE as reference in patching or info dissemination related to this particular issue.

CVE-2013-5653
Comment 3 Marcos H. Woehrmann 2013-10-22 08:14:34 UTC 
I've added the details in a private comment and will investigate the reported issue.