Ghostscript

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitrary code via a postscript (.ps) file co…CVE-2008-0411Ghostscript · 15% likely

   CWE-119

2. Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in Ghostscript 8.64, and probably earlier version…CVE-2009-0196Ghostscript · 7.4% likely

   CWE-119

3. Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly e…CVE-2009-4270Ghostscript · 6.9% likely

   CWE-119

4. The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary co…CVE-2007-6725Ghostscript · 4.8% likely

   CWE-119

5. Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management Sy…CVE-2009-0583Ghostscript · 4.7% likely

   CWE-119

6. Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly ex…CVE-2008-6679Ghostscript · 4.5% likely

   CWE-119

7. icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management System (CMS) 1.0.3 and earlier,…CVE-2009-0584Ghostscript · 4.1% likely

   CWE-189

8. Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color Management Sy…CVE-2009-0792Ghostscript · 4.0% likely

   CWE-189

9. A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass…CVE-2019-14869Ghostscript · CVSS 7.3 · 3.1% likely

   CWE-648

10. It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in or…CVE-2019-3838The ghostscript Project · CVSS 7.3 · 2.5% likely

    CWE-648

11. It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to,…CVE-2019-3835The ghostscript Project · CVSS 7.3 · 2.5% likely

    CWE-648

12. In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could ab…CVE-2019-10216ghostscript · CVSS 7.3 · 2.3% likely

    CWE-648

13. It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this…CVE-2019-3839The ghostscript Project · CVSS 7.3 · 1.7% likely

    CWE-648

14. Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the c…CVE-2010-4820Ghostscript · 0.5% likely

    CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.