Bug 694724 - GhostScript information disclosure - paranoidsafer
Summary: GhostScript information disclosure - paranoidsafer
Status: RESOLVED FIXED
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: General (show other bugs)
Version: 9.10
Hardware: PC All
: P4 normal
Assignee: Chris Liddell (chrisl)
QA Contact: Bug traffic
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-10-21 02:47 UTC by Andrei Costin (www.firmware.re)
Modified: 2019-07-22 07:09 UTC (History)
2 users (show)

See Also:
Customer:
Word Size: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andrei Costin (www.firmware.re) 2013-10-21 02:47:48 UTC
Reproduced on GS 9.10 built from sources (http://downloads.ghostscript.com/public/ghostscript-9.10.tar.gz)

More details will be release in a private attachment.

PS: Would it be possible to add "Security" to the list of "Components"?
Comment 1 Andrei Costin (www.firmware.re) 2013-10-21 02:52:44 UTC
A CVE was requested from MITRE and the following was assigned.

Please use this CVE as reference in patching or info dissemination related to this particular issue.

CVE-2013-5653
Comment 3 Marcos H. Woehrmann 2013-10-22 08:14:34 UTC
I've added the details in a private comment and will investigate the reported issue.