CVEvulnerability
CVE-2018-16510
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.
Affected configurations
• artifex ghostscript (< 9.24)
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• artifex gpl ghostscript (< 9.26)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9 git.ghostscript.com
- http://openwall.com/lists/oss-security/2018/08/27/4 Issue Tracking, Mailing List, Patch, Third Party Advisory
- https://bugs.ghostscript.com/show_bug.cgi?id=699671 Issue Tracking, Permissions Required
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://usn.ubuntu.com/3773-1/ Third Party Advisory
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9 git.ghostscript.com
- http://openwall.com/lists/oss-security/2018/08/27/4 Issue Tracking, Mailing List, Patch, Third Party Advisory
- https://bugs.ghostscript.com/show_bug.cgi?id=699671 Issue Tracking, Permissions Required
- https://security.gentoo.org/glsa/201811-12 Third Party Advisory
- https://usn.ubuntu.com/3768-1/ Third Party Advisory
- https://usn.ubuntu.com/3773-1/ Third Party Advisory