Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Vítor Hugo Silva

#33024de 53,635
7.8CVSS total
Vulnerabilidades · 1
PT-2018-1827
7.8
2018-04-18
Artifex · Ghostscript · CVE-2018-10194
Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions through 9.22 Description: The issue is related to the `set text distance` function in the pdfwrite component, which does not prevent overflows in text-positioning calculation. This allows remote attackers to cause a denial of service, potentially leading to an application crash, via a crafted PDF document. The vulnerability may also have unspecified other impacts. Recommendations: For versions through 9.22, consider disabling the `set text distance` function as a temporary workaround until a patch is available. Restrict access to the pdfwrite component to minimize the risk of exploitation. Avoid using crafted PDF documents that could trigger the overflow in text-positioning calculation until the issue is resolved.