CVE-2003-0354: High severity redhat Linux vulnerability

Published Jun 5, 2003

Updated

Unknown vulnerability in GNU Ghostscript before 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

Affected Software

5 affected components

redhat Linux=7.2

redhat Linux=8.0

redhat Linux=7.3

redhat Linux=9.0

redhat Linux=7.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade GNU Ghostscript to a version that resolves this vulnerability.
Fixed in 7.07

Event History

Jun 5, 2003

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Jun 16, 2003

Data Sourced

via NVD·04:00 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2003-0354?

CVE-2003-0354 is considered a critical vulnerability that allows attackers to execute arbitrary commands.

How do I fix CVE-2003-0354?

To fix CVE-2003-0354, update GNU Ghostscript to the latest version provided by your distribution.

What versions of software are affected by CVE-2003-0354?

CVE-2003-0354 affects various versions of Red Hat Linux, including 7.1, 7.2, 7.3, 8.0, and 9.0.

Can CVE-2003-0354 be exploited when -dSAFER is enabled?

Yes, CVE-2003-0354 can be exploited even when -dSAFER is enabled.

What type of attack does CVE-2003-0354 enable?

CVE-2003-0354 enables attackers to execute arbitrary commands via a malicious PostScript file.