Bug 694724 - GhostScript information disclosure - paranoidsafer
GhostScript information disclosure - paranoidsafer
Status: RESOLVED FIXED
Product: Ghostscript
Classification: Unclassified
Component: General
9.10
PC All
: P4 normal
Assigned To: Chris Liddell (chrisl)
Bug traffic
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-10-21 02:47 PDT by Andrei Costin (www.firmware.re)
Modified: 2016-04-06 10:22 PDT (History)
1 user (show)

See Also:
Customer:
Word Size: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andrei Costin (www.firmware.re) 2013-10-21 02:47:48 PDT
Reproduced on GS 9.10 built from sources (http://downloads.ghostscript.com/public/ghostscript-9.10.tar.gz)

More details will be release in a private attachment.

PS: Would it be possible to add "Security" to the list of "Components"?
Comment 1 Andrei Costin (www.firmware.re) 2013-10-21 02:52:44 PDT
A CVE was requested from MITRE and the following was assigned.

Please use this CVE as reference in patching or info dissemination related to this particular issue.

CVE-2013-5653
Comment 3 Marcos H. Woehrmann 2013-10-22 08:14:34 PDT
I've added the details in a private comment and will investigate the reported issue.