CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3228

Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of service (crash) via a crafted Postscript (ps) file, as demonstrated by using the ps2pdf command, which triggers an out-of-bounds read or write.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 71.1%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2015-3228

Artifex » Afpl Ghostscript » Version: 6.0

cpe:2.3:a:artifex:afpl_ghostscript:6.0
Artifex » Afpl Ghostscript » Version: 6.01

cpe:2.3:a:artifex:afpl_ghostscript:6.01
Artifex » Afpl Ghostscript » Version: 6.50

cpe:2.3:a:artifex:afpl_ghostscript:6.50
Artifex » Afpl Ghostscript » Version: 7.00

cpe:2.3:a:artifex:afpl_ghostscript:7.00
Artifex » Afpl Ghostscript » Version: 7.03

cpe:2.3:a:artifex:afpl_ghostscript:7.03
Artifex » Afpl Ghostscript » Version: 7.04

cpe:2.3:a:artifex:afpl_ghostscript:7.04
Artifex » Afpl Ghostscript » Version: 8.00

cpe:2.3:a:artifex:afpl_ghostscript:8.00
Artifex » Afpl Ghostscript » Version: 8.11

cpe:2.3:a:artifex:afpl_ghostscript:8.11
Artifex » Afpl Ghostscript » Version: 8.12

cpe:2.3:a:artifex:afpl_ghostscript:8.12
Artifex » Afpl Ghostscript » Version: 8.13

cpe:2.3:a:artifex:afpl_ghostscript:8.13
Artifex » Afpl Ghostscript » Version: 8.14

cpe:2.3:a:artifex:afpl_ghostscript:8.14
Artifex » Afpl Ghostscript » Version: 8.50

cpe:2.3:a:artifex:afpl_ghostscript:8.50
Artifex » Afpl Ghostscript » Version: 8.51

cpe:2.3:a:artifex:afpl_ghostscript:8.51
Artifex » Afpl Ghostscript » Version: 8.52

cpe:2.3:a:artifex:afpl_ghostscript:8.52
Artifex » Afpl Ghostscript » Version: 8.53

cpe:2.3:a:artifex:afpl_ghostscript:8.53
Artifex » Afpl Ghostscript » Version: 8.54

cpe:2.3:a:artifex:afpl_ghostscript:8.54

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-3228

Products

Pricing

Contact Us