/ 
Tk402.003
/ Tk::Ghostscript
Security Advisories (3)
CVE-2006-4484 (2008-10-01)

Buffer overflow in the LWZReadByte_ function in the GD extension in allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

CVE-2007-4772 (2008-01-09)

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

CVE-2007-6067 (2008-01-09)

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.

NAME

Ghostscript - Beginings of a lowlevel PostScript viewing widget

SYNOPSIS

my $gs= $parent->Ghostscript(
                'x_pixels_per_inch' => $scale,
                'y_pixels_per_inch' => $scale,
                'BoundingBox' => [ 0,0, $width, $height]
                );
$gs->Postscript("....");

DESCRIPTION

Tested with gs3 via pgs and Ghostview.pm.

Aim is to have both GS and "Display Postscript" widgets which present same interface to higher level document viewers.